context-agent

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose of local context continuity, and no external exfiltration or remote installer is shown. However, it persistently copies derived session content into MEMORY.md for future prompts, uses hard-coded author-specific paths, and relies on unverified local Python scripts from a community source; this makes it medium risk rather than benign.