skills/bmcszk/agent-skills/context7/Gen Agent Trust Hub

context7

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides standardized tools to resolve library identifiers and query documentation from the Context7 API. The instructions explicitly advise against including sensitive data in queries, following security best practices.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external source (documentation snippets from Context7), which introduces a theoretical surface for indirect prompt injection if the source data contains malicious instructions. However, the skill does not possess high-privilege capabilities that would allow such an injection to be exploited.
  • Ingestion points: Documentation and code examples returned by the query-docs tool.
  • Boundary markers: None defined in the skill instructions.
  • Capability inventory: The skill provides read-only documentation access and does not include tools for file system modification, network exfiltration of local data, or arbitrary command execution.
  • Sanitization: No explicit sanitization or validation of the retrieved documentation content is described in the skill metadata or workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 10:53 AM
Security Audit — agent-trust-hub — context7