context-anchor

This is a local context-management CLI with no evidence of malware, credential theft, or network exfiltration. It has filesystem path traversal risks in --park and permits --pin/--file reads outside workspaceRoot, and --rollback can discard tracked uncommitted changes using git checkout -- .; these are security and data-loss concerns requiring review. No suspicious domains, URLs, IPs, or environment variables are present. Severity: moderate for use with untrusted CLI inputs and potentially high data-loss impact when rollback is invoked.