Scanned skills
daymade/claude-code-skills ima-copilot
Checked the catalogued skill at ima-copilot.
D AI-triaged 22
D Security
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D Permissions
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A Transparency
A set by no findings on this axis
showing 10 of 22
references/installation_flow.md
references/installation_flow.md
references/installation_flow.md
references/installation_flow.md
scripts/diagnose.sh
scripts/diagnose.sh
scripts/diagnose.sh
scripts/diagnose.sh
scripts/install_ima_skill.sh
scripts/install_ima_skill.sh
4 suppressed by AI triage
references/api_key_setup.md
Documentation shows a benign curl usage example, not an active malicious call.
references/api_key_setup.md
Documentation explains curl reachability check, harmless example of outbound call.
references/known_issues.md
The absolute path /tmp/ima-copilot-backups/ is used in a documented example to create backups, not as an attack vector.
references/known_issues.md
The path is referenced in a documentation snippet illustrating backup creation, not malicious execution.