ContextSniper
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
Calluking
Source: github_code
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
CONTEXTSNIPER_ACCOUNT_IDCONTEXTSNIPER_AGENT_IDCONTEXTSNIPER_EDIT_DEBUGCONTEXTSNIPER_EDIT_REFRESH_TIMEOUT_SECCONTEXTSNIPER_EDIT_REFRESH_WAITCONTEXTSNIPER_FILTER_ENABLEDToggle read/exec filtering, default 1CONTEXTSNIPER_FILTER_NATIVE_BASHCONTEXTSNIPER_FILTER_NATIVE_READCONTEXTSNIPER_OPENCLAW_AUTO_STARTCONTEXTSNIPER_OPENCLAW_AUTO_STOPCONTEXTSNIPER_OPENCLAW_LAUNCH_CWDCONTEXTSNIPER_OPENCLAW_LOAD_ENVCONTEXTSNIPER_OPENCLAW_READ_TOOL_POLICYCONTEXTSNIPER_PLUGIN_AUTO_STARTCONTEXTSNIPER_PLUGIN_AUTO_STOPCONTEXTSNIPER_PLUGIN_START_WAITCONTEXTSNIPER_RUNTIME_DIRCONTEXTSNIPER_SEARCH_DEBUGCONTEXTSNIPER_SEARCH_INCLUDE_DEBUGCONTEXTSNIPER_SEARCH_LIMITCONTEXTSNIPER_SESSION_IDCONTEXTSNIPER_SOURCE_TREECONTEXTSNIPER_URLCONTEXTSNIPER_USER_IDCONTEXTSNIPER_WORKSPACE_ROOTNO_PROXY/no_proxy for 127.0.0.1, localhost, and ::1 so local ContextSniper/AGFSOPENCLAW_WORKSPACE_ROOTPYTHONPY_BINOptional Python override for plugin/backend runtimeno_proxyNO_PROXY/ for 127.0.0.1, localhost, and ::1 so local ContextSniper/AGFSCLAUDE_PROJECT_DIRCONTEXTSNIPER_SEARCH_FORCE_LIMITLLM_LISTENER_CAPTURE_RESPONSE_BYTESLLM_LISTENER_HOSTLLM_LISTENER_PORTLLM_LISTENER_UPSTREAM_BASE_URLLLM_LISTENER_LOGCONTEXTSNIPER_BACKEND_WAIT_ON_TOOLCONTEXTSNIPER_AUTH_API_KEYCONTEXTSNIPER_PLUGIN_HOOK_START_WAITAGFS_BINAGFS_HTTP_PORTAGFS_BASE_URLCONTEXTSNIPER_INJECT_CODE_POLICY_ON_SUBMITCONTEXTSNIPER_CODE_SYNC_HOOK_TIMEOUTCONTEXTSNIPER_DIRCONTEXTSNIPER_FILTER_BASH_TIMEOUTCONTEXTSNIPER_INDEX_LEVELSVOLC_API_KEYVOLC_BASE_URLVOLC_EMBEDDING_MODELCONTEXTSNIPER_CONFIGCONTEXTSNIPER_API_KEYCONTEXTSNIPER_EMBEDDING_API_KEYAPI key for real semantic code searchOPENGAUSS_DIMENSIONCONTEXTSNIPER_COMPOSE_MAX_CODE_PATHSCONTEXTSNIPER_BOOTSTRAP_MAX_FILESCONTEXTSNIPER_BOOTSTRAP_FULL_INDEX_CAP_FILESCONTEXTSNIPER_CODE_SYNC_MAX_FILESCONTEXTSNIPER_CODE_SEARCH_CANDIDATE_MAX_FILESCONTEXTSNIPER_CODE_SEARCH_EMBED_MAX_FILESCONTEXTSNIPER_CODE_SEARCH_MAX_SNIPPETSCONTEXTSNIPER_CODE_SEARCH_INGEST_CANDIDATESCONTEXTSNIPER_CODE_SEARCH_INGEST_ASYNCCONTEXTSNIPER_CODE_SEARCH_INGEST_MAX_FILESCONTEXTSNIPER_CODE_SEARCH_INGEST_MAX_CHUNKSCONTEXTSNIPER_CODE_SYNC_TIMEOUT_SECCONTEXTSNIPER_BOOTSTRAP_INGEST_WORKERSCONTEXTSNIPER_CODE_SEARCH_EMBED_BATCH_TEXTSCONTEXTSNIPER_CODE_SEARCH_EMBED_BATCH_TOKENSCONTEXTSNIPER_CODE_FUSE_MODECONTEXTSNIPER_CODE_FUSE_W_EMBEDCONTEXTSNIPER_CODE_FUSE_W_BM25CONTEXTSNIPER_CODE_FUSE_W_CTAGSCONTEXTSNIPER_CODE_FUSE_W_GRAPHCONTEXTSNIPER_SEARCH_BOOTSTRAP_DRAIN_ROUNDSCONTEXTSNIPER_AFTER_TURN_THRESHOLDCONTEXTSNIPER_SEARCH_BOOTSTRAP_WAIT_TIMEOUT_SECCONTEXTSNIPER_CODE_RETRIEVE_EACHCONTEXTSNIPER_FILTER_MEMORY_MAX_LINESCONTEXTSNIPER_FILTER_READ_MIN_CHARSCONTEXTSNIPER_FILTER_READ_MAX_LINESCONTEXTSNIPER_FILTER_BASH_MAX_LINESCONTEXTSNIPER_FILTER_BASH_MIN_CHARSCONTEXTSNIPER_FILTER_BASH_MIN_LINESOPENAI_API_KEYSWE_ROWS_APISWE_LITE_INSTANCE_IDREPO_BASESWE_PROMPT_KINDSWE_PRO_INSTANCE_IDCONTEXTSNIPER_CODE_TOGGLECONDA_EXERUN_IDXSWE_LOCAL_ENV_PER_RUNSWE_LOCAL_ENV_RECREATESWE_VALIDATION_PYTHONSWE_TASK_PYTHONSWE_VALIDATION_FORCE_LOCALSWE_OFFICIAL_INSTANCE_IMAGE_TAGSWE_OFFICIAL_STABLE_INSTANCE_IMAGE_TAGSWE_VALIDATION_REUSE_REPORTSSWE_OFFICIAL_RETRIESSWE_VALIDATION_TIMEOUT_SECTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
12/12 tools missing one or more hints — contextsniper_health (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); contextsniper_index_codebase (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); contextsniper_search_code (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +9 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Descriptions match behaviour
2 tools describe read intent but their handlers mutate — edit_file (line 456: target.write_text(updated, encoding="utf-8")); edit_file (line 207: target.write_text(updated, encoding="utf-8"))
Rename the tool, rewrite the description, or move the side-effect into a separate clearly-named tool.
Tool test coverage
Only 0/12 tools referenced in tests (0%)
Write tests that reference each tool by name so every tool has at least one test.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/calluking/contextsniper)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check