Ima Skill

• Analyzed: Mar 24, 2026, 7:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: 96719a59b0e9d3be2b6aa842bc9a27a10b9471d46dae70eec9347b19dbc5bf8d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The ima-skill bundle is a legitimate integration for the IMA OpenAPI, providing comprehensive support for note management and knowledge base operations. It includes well-documented workflows for handling file uploads via Tencent Cloud COS (using `cos-upload.cjs`) and robust pre-flight validation (`preflight-check.cjs`). The instructions specifically address data integrity issues like UTF-8 encoding in PowerShell 5.1 and emphasize user privacy by restricting the display of sensitive note content in shared contexts. No evidence of malicious intent, credential exfiltration to unauthorized third parties, or suspicious obfuscation was found.