context7-auto-research
Warn
Audited by Socket on Jun 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose is coherent with documentation lookup, and the external service appears legitimate, but the skill’s actual execution path depends on an unseen local script and a separate sub-skill. Credential use is proportionate, yet remote-content ingestion plus Bash access and transitive trust raise medium risk.
Confidence: 79%Severity: 56%
Audit Metadata