Skip to main content

copilot-log-analysis

Analyzes GitHub Copilot session logs to extract token usage and model information, aiding in debugging and understanding interactions.

Install this skill

or
65/100

Security score

The copilot-log-analysis skill was audited on Mar 8, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 339

Template literal with variable interpolation in command context

SourceSKILL.md
339console.log(`Found ${sessionFiles.length} session files`);
medium line 355

Template literal with variable interpolation in command context

SourceSKILL.md
355console.log(`Tokens: ${parsed.tokens}`);
medium line 356

Template literal with variable interpolation in command context

SourceSKILL.md
356console.log(`Interactions: ${parsed.interactions}`);
medium line 357

Template literal with variable interpolation in command context

SourceSKILL.md
357console.log(`Editor: ${editorType}`);
medium line 37

Access to hidden dotfiles in home directory

SourceSKILL.md
374. **Copilot CLI Sessions**: `~/.copilot/session-state/*.jsonl`
medium line 42

Access to hidden dotfiles in home directory

SourceSKILL.md
42- **Linux**: `~/.config/{Variant}/User` (respects `XDG_CONFIG_HOME`)
medium line 43

Access to hidden dotfiles in home directory

SourceSKILL.md
43- **Remote/Server**: `~/.vscode-server/data/User`, `~/.vscode-server-insiders/data/User`
Scanned on Mar 8, 2026
View Security Dashboard
Installation guide →