1 file · 49 lines · 2.0 KB
View on GitHub
- context-timeline.json 49 lines · 2.0 KB
context-timeline.json
JSON
{
"description": "Real-time browser visualization of Claude Code's context window and subagent/too..."
"hooks": {
"SessionStart": [1 item]
"PreToolUse": [1 item]
"PostToolUse": [1 item]
"Stop": [1 item]
}
}
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
Partial analysis: some checks could not run on this component.
8 observations
scanner score 92/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Agent Config Directory Access ×2Agent Snooping · context-timeline.py:75
- Unbounded Resource Access ×2Excessive Agency · context-timeline.py:147
- Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env, file_read, file_write, network, shell.MCP Least Privilege · SKILL.md:1
- subprocess module callDangerous Code Execution · context-timeline.py:1109
- Internal Network RequestServer-Side Request Forgery · context-timeline.py:1173
Showing 7 of 8 observations. Learn more about NVIDIA SkillSpector or how components are reviewed.