get-context
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the wrapper itself is small and plausibly aligned with code-context lookup, but it delegates to an unseen agent, may clone/fetch arbitrary external content, and exposes local dependency metadata in empty-input mode. The main risk is transitive trust plus prompt-injection exposure from untrusted external content, not confirmed malware.
Confidence: 86%Severity: 64%
Audit Metadata