Mind Security

AI security toolkit — deepfake detection, prompt injection scanning, malware/phishing URL scanning, and AI text detection. Use when: (1) verifying if an imag...

This package generally implements what it claims, but there are metadata and requirement inconsistencies you should resolve before installing or providing credentials. Things to consider: - Only provide API keys you intend to use. BitMind and GPTZero are needed for their respective modules; VirusTotal/URLScan/Google Safe Browsing are optional and should not be treated as mandatory. - The registry's requirement for curl/wget appears unnecessary — the scripts use Python's urllib. Ask the publisher why curl/wget are marked required and refuse to provide unrelated binaries or run in environments that don't need them. - The prompt-injection module includes real attack patterns in its docs; the pre-scan detection of injection strings is expected. This is not proof of maliciousness. - The optional llm-guard ML layer downloads a ~500MB model to the user's cache on first use — plan for disk and network usage and review that library if you enable it. - The skill sends user content to third-party APIs (BitMind, GPTZero, VirusTotal, URLScan, Google Safe Browsing). If you will analyze sensitive data, isolate network access, use dedicated API keys with limited scope, and confirm the vendors' privacy policies. - Recommended next steps: contact the skill publisher (repo homepage) to correct registry metadata (mark optional keys as optional, remove unnecessary curl/wget requirement), or inspect/modify the scripts locally before use. If you need higher assurance, prefer running the scripts in an isolated environment or review the full code paths for any truncated parts.

Type: OpenClaw Skill Name: mind-security Version: 1.2.4 The mind-security skill bundle is a legitimate AI security toolkit providing deepfake detection, prompt injection scanning, malware URL scanning, and AI text detection. The scripts (check_ai_text.py, check_deepfake.py, check_malware.py, check_prompt_injection.py) are well-structured, use Python's standard library for network requests, and interact with reputable third-party APIs like BitMind, GPTZero, VirusTotal, and URLScan.io. The bundle is transparent about data handling, requires explicit API keys for external services, and contains no evidence of malicious intent, data exfiltration, or unauthorized execution.