Security audit
Contexory
Security checks for vulnerabilities and agentic risk
Overview
This plugin coherently syncs and optionally manages Contexory skills, with sensitive behavior mostly disclosed and scoped to the configured skills directory and API token.
Install only if you trust the Contexory workspace and the skills it publishes, because synced skills can update automatically and affect agent behavior. Keep management disabled unless you want the agent to create, edit, delete, or publish Contexory skills, use a narrowly scoped token, prefer review mode with reviewers configured, and choose a dedicated skills directory.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
