AGENTSCORE-2026-0069
MCP package: @proofofwork-agency/contextrelay
Published 6/24/2026 · 3.7.0 → 3.8.0
@proofofwork-agency/contextrelay updated from 3.7.0 to 3.8.0. Score changed 85/100 to 65/100 (-20). Risk: LOW to ELEVATED. 4 findings.
85 → 65
Score
LOW → ELEVATED
Risk
WARN
Verdict
Findings
- low install_script: Package has 'postinstall' script: node scripts/postinstall.cjs
- low install_script: Package has 'preuninstall' script: node scripts/preuninstall.cjs
- high command_injection: Potential command injection: shell execution with template literal input
- low no_provenance: Package is not published with provenance attestations or trusted publishing. Published by: proofofworkagency