smart-context
Smart Context efficiently extracts relevant code context, reducing token usage by 72% while maintaining high accuracy for code analysis tasks.
Install this skill
Security score
The smart-context skill was audited on Feb 28, 2026 and we found 16 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 204 | return { error: `Node not found: ${request.target}` }; |
Template literal with variable interpolation in command context
| 346 | return `- ${node.id} (${node.type})`; |
Template literal with variable interpolation in command context
| 351 | return `### ${node.name}\n\`${node.signature}\``; |
Template literal with variable interpolation in command context
| 353 | return `### ${node.name} (${node.type})\nPath: ${node.path}:${node.line}`; |
Template literal with variable interpolation in command context
| 360 | lines.push(`- Async: ${node.isAsync}`); |
Template literal with variable interpolation in command context
| 361 | lines.push(`- Exported: ${node.isExported}`); |
Template literal with variable interpolation in command context
| 362 | lines.push(`- Params: ${node.params?.map(p => `${p.name}: ${p.type}`).join(', ')}`); |
Template literal with variable interpolation in command context
| 363 | lines.push(`- Returns: ${node.returnType}`); |
Template literal with variable interpolation in command context
| 373 | lines.unshift(`/**\n * ${node.docstring}\n */`); |
Template literal with variable interpolation in command context
| 376 | lines.push(`- Complexity: ${node.complexity || 'N/A'}`); |
Template literal with variable interpolation in command context
| 377 | lines.push(`- LOC: ${node.loc}`); |
Template literal with variable interpolation in command context
| 380 | lines.push(`- Calls: ${node.calls.slice(0, 5).join(', ')}${node.calls.length > 5 ? '...' : ''}`); |
Template literal with variable interpolation in command context
| 383 | lines.push(`- Called by: ${node.calledBy.slice(0, 5).join(', ')}${node.calledBy.length > 5 ? '...' : ''}`); |
Template literal with variable interpolation in command context
| 391 | return `${this.renderLevel3(node)}\n\n\`\`\`typescript\n// Implementation summary (Level 4)\n// Read actual file for full implementation\n\`\`\``; |
Template literal with variable interpolation in command context
| 396 | return `${this.renderLevel3(node)}\n\n[Full implementation - Read from: ${node.path}:${node.line}-${node.endLine}]`; |
Access to .env file
| 116 | const payload = jwt.verify(token, process.env.JWT_SECRET); |