Context-Engine MCP - Agentic Context Compression Suite
# Add to your Claude Code skills
git clone https://github.com/Context-Engine-AI/Context-EngineGuides for using ai agents skills like Context-Engine.
Last scanned: 5/23/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@sveltejs/kit: @sveltejs/kit has memory amplification DoS vulnerability in Remote Functions binary form deserializer (application/x-sveltekit-formdata)",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "cookie: cookie accepts cookie name, path, and domain with out of bounds characters",
"severity": "low"
},
{
"type": "npm-audit",
"message": "devalue: devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse",
"severity": "high"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "immutable: Immutable is vulnerable to Prototype Pollution",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "svelte: svelte vulnerable to Cross-site Scripting",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
},
{
"type": "npm-audit",
"message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-05-23T06:35:13.754Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Context Engine ships AI agent skills that teach your coding assistant how to use 30+ MCP tools for semantic search, symbol graph navigation, memory, and more.
Recommended: Install natively from the public GitHub repo:
# Add the marketplace (one-time)
/plugin marketplace add Context-Engine-AI/Context-Engine
# Install the skill
/plugin install context-engine
This pulls the skill directly from GitHub and auto-loads MCP tool guidance into your session.
Alternatively, copy the rules file manually:
cp -r skills/context-engine/ your-project/.claude/
Context Engine rules are included in .cursorrules at the root of your workspace. Cursor picks this up automatically when the file is present.
# Copy to your project root
cp .cursorrules your-project/.cursorrules
Recommended: Install natively using the built-in skill installer — just ask Codex:
"Install the context-engine skill from https://github.com/Context-Engine-AI/Context-Engine"
Codex will pull .codex/skills/context-engine/ (including SKILL.md and reference docs) into ~/.codex/skills/ automatically.
Or install manually:
cp -r .codex/skills/context-engine/ ~/.codex/skills/context-engine/
cp -r .codex/skills/ your-project/.codex/skills/
cp -r .augment/ your-project/.augment/
cp GEMINI.md your-project/GEMINI.md
The core skill file works with any AI assistant that supports custom instructions:
cp skills/context-engine/SKILL.md your-project/
Then tell your assistant: "Read SKILL.md for instructions on using Context Engine MCP tools."
If you use Claude Code, Codex, or another terminal-based MCP client, install the MCP bridge to connect your codebase to Context Engine without VS Code:
npm install -g @context-engine-bridge/context-engine-mcp-bridge
# Authenticate, index your codebase, and start watching for changes
ctxce connect <your-api-key> --workspace /path/to/repo
# Run as a background daemon (recommended)
ctxce connect <your-api-key> --workspace /path/to/repo --daemon
ctxce status # Check if the daemon is running
ctxce stop # Stop the background daemon
| Flag | Alias | Description |
|------|-------|-------------|
| --workspace <path> | -w | Workspace root (default: cwd) |
| --daemon | -d, --bg | Run as background daemon |
| --interval <sec> | | File watch interval in seconds (default: 30) |
| --no-watch | --once | Index once, don't watch for changes |
| --skip-index | --auth-only | Authenticate only, skip initial index |
Once connected, point your MCP client at the bridge:
# stdio mode (for Claude Code, Codex, etc.)
ctxce mcp-serve --workspace /path/to/repo
# HTTP mode (for clients that speak HTTP)
ctxce mcp-http-serve --workspace /path/to/repo --port 30810
The daemon and MCP server share auth via ~/.ctxce/auth.json. Logs are at ~/.context-engine/daemon.log.
For full bridge documentation, see Context-Engine-MCP-Bridge.
The skills teach your AI assistant to:
search as the default tool — auto-routes queries to the best backend (semantic search, Q&A, symbol graph, tests, config)symbol_graph — find callers, callees, definitions, importers, subclassesbatch_search, batch_symbol_graph, batch_graph_query for 75%+ token savingsmemory_store and memory_find for persistent context across sessionscross_repo_search with boundary tracing for multi-repo codebasespattern_search for retry loops, error handling, singletons across languagessearch_commits_for and change_history_for_pathSee skills/context-engine/SKILL.md for the complete tool reference.
npm i -g @context-engine-bridge/context-engine-mcp-bridge && ctxce connect <api-key> --daemonContext-Engine Source Available License 1.0
© 2025 Context Engine Inc. and John Donalson.