copaw-ai-assistant

SUSPICIOUS. The skill’s capabilities mostly fit its stated purpose, and the flagged shell patterns are largely documentation, not hidden execution. However, the installation trust story is weaker than ideal: primary script installers use pipe-to-shell/iex, the skill is published by ara.so while the software comes from agentscope-ai, and the referenced repo redirect creates provenance ambiguity. The requested credentials are broad but proportionate to a multi-channel assistant. Main concern is supply-chain/install trust and the framework’s ability to send scheduled messages on the user’s behalf, not confirmed malware.