registry / copilot.tools / 3.2.0

copilot.tools@3.2.0

Copilot skills: /tools, /history, /snapshot, /teach-me — session tracking, file snapshots, interactive code quiz — global install

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Filesystem

Supply chain

HighEntropyStrings

Manifest

CopyleftLicense

scanned 3 file(s), 16.5 KB of source

Source & flagged code

1 flagged

package.jsonView file

Lines 1-26json

2 "name": "copilot.tools",

3 "version": "3.2.0",

4 "license": "AGPL-3.0",

5 "description": "Copilot skills: /tools, /history, /snapshot, /teach-me — session tracking, file snapshots, interactive code quiz — global install",

6 "bin": {

7 "copilot-history": "./_list_sessions.js",

8 "copilot-tools-install": "./tools-install.js",

9 "copilot-doc-extract": "./_extract_office.js"

10 },

11 "files": [

12 "_list_sessions.js",

13 "_extract_office.js",

14 "tools-install.js",

15 "README.md",

16 "CHANGELOG.md",

17 "skills"

18 ],

19 "scripts": {

20 "postinstall": "node ./tools-install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

21 },

22 "engines": {

23 "node": ">=14"

24 }

25}

Source & flagged code

1 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./tools-install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code