context-optimization Audit report.

Warnings

• Permission surface may require sandboxing
• The SKILL.md excerpt is incomplete at the end, so the full masking rules and edge cases are not fully visible in the provided snippet.
• The Python utilities use heuristic token estimation and simple summarization; the code itself notes that production systems should use model-specific tokenizers and LLM-based summarization.
• The skill does not explicitly address handling untrusted or adversarial content inside tool outputs during masking or compaction, though the stated rules mitigate some risk.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.