context7-auto-research
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is plausible, but this wrapper skill mainly tells the agent/user to install a different skill from a personal archived GitHub repo through a community CLI. Data flow appears intended for Context7, not an obvious proxy, but the transitive install chain and unpinned personal-repo source make trust disproportionate to a simple documentation-fetching skill.
Confidence: 90%Severity: 64%
Audit Metadata