ImmyBot Script Execution — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ImmyBot Script Execution (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
ImmyBot ships a PowerShell script library that runs against managed endpoints in SYSTEM context. This is a privileged, destructive capability — scripts can install/uninstall software, change system settings, access files, and reboot the machine.
| Tool | Purpose |
|---|---|
immybot_scripts_list | List scripts with category/language/status filters |
immybot_scripts_get | Full detail for one script by ID |
immybot_scripts_search | Search scripts by name |
immybot_scripts_categories | List available script categories |
immybot_scripts_validate | Validate script syntax before running |
immybot_scripts_run | Execute a script on a computer (DESTRUCTIVE) |
immybot_scripts_execution_history | Past executions for a computer |
immybot_scripts_execution_result | Result of one specific execution |
immybot_scripts_search → immybot_scripts_getRead the script description and confirm it matches the intended outcome. Prefer global, vetted scripts over ad-hoc ones.
immybot_scripts_validate checks PowerShell syntax without executing anything. Always validate custom script content first.
immybot_computers_get — confirm the computer is online and is the correct endpoint. Running a script on the wrong machine is the most common and most damaging mistake.
immybot_scripts_run is destructive. The MCP server returns a confirmation warning describing SYSTEM-context risk. Surface that warning, name the script and target computer explicitly, and obtain operator approval before proceeding.
Call immybot_scripts_run with the script ID, target computer ID, optional parameters, timeout (default 30 min), and execution context (default System).
immybot_scripts_execution_result # this run
immybot_scripts_execution_history # the computer's run historyparameters from immybot_scripts_get before running.
installs, disk operations) may need a higher value.
the script explicitly needs a user context.
approval request.
immybot_scripts_validatebefore it ever runs.
execution result before expanding scope.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.