REPORT 01M7BGZTVBTA9FWHYS9VGJJD81 · checks-v2
copilot-cli-quickstart skill: automated checks
What HostedMCP checked on 13 Nov 2026, 22:38 UTC in github/awesome-copilot/skills/copilot-cli-quickstart on the default branch. Every result links to the public source it came from, so you can check it yourself.
Passed HostedMCP checks v2
100/100
6 of 6 checks ran · 0 high findings · not a security audit
- Checked
- 13 Nov 2026, 22:38 UTC
- Files read
- SKILL.md and scripts
- Methodology
- checks-v2
Origin
35 / 35 points- ПройденоСвязанный и доступный исходный репозиторий15 pts
github/awesome-copilot/skills/copilot-cli-quickstart is public and reachable
github.com/github/awesome-copilot/tree/HEAD/skills/copilot-cli-quickst ↗ - Пройдено
- ПройденоКоммит или релиз за последний год10 pts
Last commit 2026-11-11
github.com/github/awesome-copilot/commits ↗
Scripts
30 / 30 points- ПройденоВ скриптах нет загрузки с запуском и кражи учётных данных30 pts
No scripts in the skill folder
Instructions to the agent
35 / 35 points- ПройденоВ SKILL.md нет скрытых инструкций25 pts
No override phrases, safeguard switches, credential requests or hidden characters
github.com/github/awesome-copilot/blob/HEAD/skills/copilot-cli-quickst ↗ - ПройденоЗаранее разрешённые инструменты ограничены10 pts
Pre-approved: ask_user, sql, fetch_copilot_cli_documentation
github.com/github/awesome-copilot/blob/HEAD/skills/copilot-cli-quickst ↗
What these checks do not cover
- Scripts are read, never run. Their logic is not audited, and up to five scripts per skill are read.
- Results describe github/awesome-copilot/skills/copilot-cli-quickstart on the date above; a later commit can differ.
- A pass is not a guarantee of safety. Read the scripts before you let an agent run them, and keep allowed-tools narrow.