Back to plugin

Security audit

Contexory

Security checks for vulnerabilities and agentic risk

Overview

This plugin coherently syncs and optionally manages Contexory skills, with sensitive behavior mostly disclosed and scoped to the configured skills directory and API token.

Install only if you trust the Contexory workspace and the skills it publishes, because synced skills can update automatically and affect agent behavior. Keep management disabled unless you want the agent to create, edit, delete, or publish Contexory skills, use a narrowly scoped token, prefer review mode with reviewers configured, and choose a dedicated skills directory.

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

No suspicious patterns detected.