Security audit
Security checks for vulnerabilities and agentic risk
The skill provides context-management guidance and a local reminder script, with optional scheduling that users configure themselves.
Save important task notes before compacting. Enable hooks or scheduling only if you want recurring reminders, and correct the cron script path first. Counter files live in your user state directory, despite the guide's outdated /tmp instructions. Host-specific integrations remain untested.
The supplied cron entry introduces an automatic schedule unrelated to the declared logical-boundary and context-pressure triggers. Although the script name suggests a compaction-related function, its contents are not supplied, so the evidence establishes scheduled invocation—not that compaction itself occurs automatically.
Without declared permissions the skill's intent is opaque and cannot be validated.
These phrases can occur in unrelated requests, such as requests for compact formatting or discussions of physical phase transitions. The skill does not specify that they must refer to conversation-context management or provide exclusions, creating a risk of unintended activation.
