Summary
ima-plus-skill v1.0.8 passed all eight phases of Sigil's automated security scan with no findings detected. The scan analyzed 35 files for install hooks, dangerous code patterns, network exfiltration, credential access, obfuscation, provenance, prompt injection, and skill security signals.
Package description: IMA.plus 技能（V1.0.8）——笔记管理与知识库操作。支持自然语言目录路径（--path 自动解析知识库/文件夹/笔记本，无需 kb_id，解析结果分层缓存零重复调用）、上传/导出文件、打包导出知识库为 zip、创建文件夹、移动/重命名/置顶知识条目、创建与修改知识库、标签管理、权限管理、广场发现、添加网页到知识库、搜索/浏览/创建/编辑笔记。凭证单一来源：环境变量 IMA_OPE...
v1.0.8
5 September 2026, 03:48 UTC
by Sigil Bot
Risk Score
0
Findings
0
Files Scanned
35
Provenance
No findings detected. This package passed all 35 file scans with a verdict of LOW RISK.
Badge
Markdown
[](https://sigilsec.ai/scans/079931D5-A43A-44DB-AE43-BDACF4C48B90)HTML
<a href="https://sigilsec.ai/scans/079931D5-A43A-44DB-AE43-BDACF4C48B90"><img src="https://sigilsec.ai/badge/clawhub/ima-plus-skill" alt="Sigil Scan"></a>Run This Scan Yourself
Scan your own packages
Run Sigil locally to audit any package before it touches your codebase.
Sigil Pro
Cloud scanning, AI investigation, web dashboard, and CI/CD integration. 14-day free trial.
Start free trial →Get threat intelligence and product updates
Security research, new threat signatures, and product updates. No spam.
Other clawhub scans
Believe this result is incorrect? Request a review or see our Terms of Service and Methodology.