ima-copilot

SUSPICIOUS. The skill's capabilities mostly match its stated wrapper purpose, and credentials appear to flow only to official Tencent IMA endpoints. The main concerns are transitive installation of another skill and medium supply-chain risk from remote archive/skill installation without strong public artifact verification; these are proportionate but elevate trust requirements.

The visible code appears to be an installer rather than direct malware. Its main supply-chain risk is the unconditional use of `npx -y` to execute an npm-based installer and install content globally, combined with weak trust and validation of archive-derived skill content and a fallback installation target. No direct evidence of credential theft, exfiltration, persistence, or destructive behavior appears in this fragment. The package and extracted skill should be independently verified before execution.