ClawHub
Back to skill

Security audit

mar-context-compression

Security checks for vulnerabilities and agentic risk

Overview

The context-compression guidance is mostly coherent, but the included evaluator has an under-declared API-key requirement and can send compressed conversation context to an external SkillBoss API.

Install only if you are comfortable with the evaluator’s external SkillBoss API flow. If you only need the written context-compression strategies, avoid running the Python evaluator or remove it; if you do run it, do not use it on chats, code, logs, or summaries that contain secrets or private business data unless you have confirmed the provider and data-handling terms.

Static analysis

No suspicious patterns detected.