Magic Context AI Agent

by cortexkit• 2.5k•• Scanned•Claim this listing•Request removal
Database Managementagent frameworkagent memoryaiai agentsai context

Unbounded context. Memory that manages itself. One session, for life. The hippocampus for coding agents, part of CortexKit.

Magic Context is an open-source ai agent by cortexkit, written mainly in TypeScript, with 2,450 GitHub stars and the MIT license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit d807160. Seen able to run dynamic code, read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at d807160 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit181 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (133)

  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    brace-expansion@2.1.1: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    bun.lock
  • medium
    brace-expansion@5.0.5: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    bun.lock
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    bun.lock
  • medium
    devalue@5.8.1: 8 known vulnerabilities
    GHSA-4q55-j62x-fr9h, GHSA-9rgm-9g3h-6x36, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32 +3 more
    bun.lock
  • medium
    js-yaml@4.2.0: 3 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj
    bun.lock
  • medium
    nanoid@3.3.12: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
    bun.lock
  • medium
    postcss@8.5.14: 2 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    postcss@8.5.15: 2 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    protobufjs@7.5.6: 4 known vulnerabilities
    GHSA-f38q-mgvj-vph7, GHSA-j3f2-48v5-ccww, GHSA-jggg-4jg4-v7c6, GHSA-wcpc-wj8m-hjx6
    bun.lock
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    bun.lock
  • medium
    sharp@0.35.4: 1 known vulnerability
    GHSA-wq5f-xc86-pv6w
    bun.lock
  • medium
    smol-toml@1.6.1: 2 known vulnerabilities
    GHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2
    bun.lock
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    bun.lock
  • medium
    svgo@4.0.1: 3 known vulnerabilities
    GHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r
    bun.lock
  • medium
    toml@4.1.1: 6 known vulnerabilities
    GHSA-4qx8-w7c3-pj3p, GHSA-82x6-q7mm-w9cf, GHSA-9j65-hcg3-gc64, GHSA-9qmh-m7c6-f92p, GHSA-h895-cgqg-jf52 +1 more
    bun.lock
  • medium
    undici@6.28.1: 5 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c
    bun.lock
  • medium
    undici@7.28.0: 23 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +18 more
    bun.lock
  • medium
    undici@8.10.2: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    bun.lock
  • medium
    undici@8.5.0: 23 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +18 more
    bun.lock
  • medium
    vite@6.4.3: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    bun.lock
  • medium
    vite@8.1.0: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    bun.lock
  • medium
    ws@8.20.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    bun.lock
  • medium
    ws@8.20.1: 1 known vulnerability
    GHSA-96hv-2xvq-fx4p
    bun.lock
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    zod@4.1.8: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    quick-xml@0.39.4: 2 known vulnerabilities
    RUSTSEC-2026-0194, RUSTSEC-2026-0195
    packages/dashboard/src-tauri/Cargo.lock
  • medium
    Install or build failed in a clean environment
    is might be a permissions issue, please double-check the npm error permissions of the file and its containing directories, or try running npm error the command again as root/Administrator. npm error A complete log of this run can be found in: /tmp/home/.npm/_logs/2026-11-05T18_54_15_731Z-debug-0.log
  • medium
    Install contacted hosts other than package registries
    api.nuget.org
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/dashboard/src/lib/theme.test.ts:124
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/dashboard/src/lib/theme.test.ts:158
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/plugin/src/config/variable.test.ts:310
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/plugin/src/features/magic-context/memory/embedding-ssrf.test.ts:7
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/plugin/src/features/magic-context/memory/embedding-ssrf.test.ts:11
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/plugin/src/features/magic-context/smart-notes/capabilities.test.ts:117
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/plugin/src/features/magic-context/smart-notes/capabilities.test.ts:119
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/plugin/src/features/magic-context/smart-notes/capabilities.test.ts:127
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/plugin/src/features/magic-context/smart-notes/compiler.test.ts:56
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/plugin/src/features/magic-context/smart-notes/http-semantics.test.ts:442
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/plugin/src/hooks/magic-context/auto-search-re-review.test.ts:84
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/plugin/src/hooks/magic-context/motor-double-bust.test.ts:130
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/plugin/src/hooks/magic-context/opencode1-to-model-messages.fixture.ts:101
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/plugin/src/hooks/magic-context/processed-images-providers.test.ts:24
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/plugin/src/v2/hooks/image-cache-independent-review.test.ts:18
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    README.md:346
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.bn.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.ar.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.da.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.el.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.es.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.de.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.ja.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.ko.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.pl.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.th.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.uk.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.vi.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.zh-CN.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.pt-BR.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.ru.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.zh-TW.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.fr.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.bs.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.tr.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.nb.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    docs/i18n/README.it.md:259
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/cli/src/commands/doctor-issue-report.test.ts:395
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/pi-plugin/src/auto-search-pi.test.ts:134
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/cli/src/lib/logs-opencode.test.ts:135
  • low
    Possible example credential in docs/tests: jwt
    packages/cli/src/lib/logs-opencode.test.ts:248
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/pi-plugin/src/pi-lkg-wire-fence.test.ts:100
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/pi-plugin/src/inject-compartments-pi.test.ts:2510
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/features/magic-context/migrations-v94.test.ts:110
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/features/magic-context/migrations-v22.test.ts:244
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/auto-search-replay.fixture.ts:59
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/host-compaction-reanchor.test.ts:37
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/issue-538-reanchor-starved.test.ts:151
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/m0m1-taxonomy.test.ts:94
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/restart-history-omission.test.ts:89
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/prefix-trim-absent-boundary.test.ts:401
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/single-store-publish-cache.test.ts:41
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    packages/plugin/src/hooks/magic-context/system-prompt-delivery.test.ts:33
  • low
    Possible example credential in docs/tests: generic-api-key
    5 matches in this file
    packages/plugin/src/hooks/magic-context/system-prompt-delivery-adversarial.test.ts:110
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    packages/plugin/src/shared/redaction.test.ts:34
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/plugin/src/hooks/magic-context/transform-postprocess-phase.test.ts:4941
  • low
    tokio@1.53.1: 1 known vulnerability
    RUSTSEC-2026-0386
    Cargo.lock
  • low
    @ai-sdk/provider-utils@4.0.23: 1 known vulnerability
    GHSA-866g-f22w-33x8
    bun.lock
  • low
    @ai-sdk/provider-utils@4.0.27: 1 known vulnerability
    GHSA-866g-f22w-33x8
    bun.lock
  • low
    @babel/core@7.28.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    bun.lock
  • low
    @babel/core@7.29.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    bun.lock
  • low
    baseline-browser-mapping@2.10.27: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    bun.lock
  • low
    glob@13.0.5: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    bun.lock
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    bun.lock
  • low
    glob@9.3.5: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    bun.lock
  • low
    ip-address@10.7.0: 3 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rxp7-6hxx-x8q5
    bun.lock
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    bun.lock
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    bun.lock
  • low
    minimatch@8.0.7: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    bun.lock
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    bun.lock
  • low
    glib@0.18.5: 1 known vulnerability
    RUSTSEC-2024-0429
    packages/dashboard/src-tauri/Cargo.lock
  • low
    h2@0.4.15: 1 known vulnerability
    RUSTSEC-2026-0258
    packages/dashboard/src-tauri/Cargo.lock
  • low
    proc-macro-error@1.0.4: 1 known vulnerability
    RUSTSEC-2024-0370
    packages/dashboard/src-tauri/Cargo.lock
  • low
    rustls@0.23.45: 4 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    packages/dashboard/src-tauri/Cargo.lock
  • low
    rustls-webpki@0.103.15: 1 known vulnerability
    RUSTSEC-2026-0382
    packages/dashboard/src-tauri/Cargo.lock
  • low
    tokio@1.52.3: 1 known vulnerability
    RUSTSEC-2026-0386
    packages/dashboard/src-tauri/Cargo.lock
  • low
    unic-char-property@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0081
    packages/dashboard/src-tauri/Cargo.lock
  • low
    unic-char-range@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0075
    packages/dashboard/src-tauri/Cargo.lock
  • low
    unic-common@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0080
    packages/dashboard/src-tauri/Cargo.lock
  • low
    unic-ucd-ident@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0100
    packages/dashboard/src-tauri/Cargo.lock
  • low
    unic-ucd-version@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0098
    packages/dashboard/src-tauri/Cargo.lock
  • low
    webpki-root-certs@1.0.8: 1 known vulnerability
    RUSTSEC-2026-0383
    packages/dashboard/src-tauri/Cargo.lock
  • low
    zbus_names@4.3.4: 1 known vulnerability
    RUSTSEC-2026-0371
    packages/dashboard/src-tauri/Cargo.lock
  • low
    zvariant@5.15.0: 1 known vulnerability
    RUSTSEC-2026-0370
    packages/dashboard/src-tauri/Cargo.lock
  • low
    zvariant_derive@5.15.0: 1 known vulnerability
    RUSTSEC-2026-0372
    packages/dashboard/src-tauri/Cargo.lock
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
api.nuget.orggithub.comregistry.npmjs.orgrelease-assets.githubusercontent.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Magic Context alternatives

View more →

Similar ai agents in Database Management, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Magic Context (this page)
cortexkit
2.5kMITNov 1, 2026Scanned, no flagged issues
Graphify
Graphify-Labs
140kApache-2.0Nov 1, 2026Scanned, no flagged issues
Claude Mem
thedotmack
108kApache-2.0Nov 1, 2026Scanned, no flagged issues
Mem0
mem0ai
68kApache-2.0Oct 30, 2026Scanned, no flagged issues
Hindsight
vectorize-io
57kMITNov 1, 2026Scanned, no flagged issues
Dokploy
Dokploy
38kNone foundOct 31, 2026Not scanned yet