context7-auto-research
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to automatically fetch documentation from an external source, specifically the Context7 API. This creates an indirect prompt injection surface where untrusted data could be used to influence the agent's behavior. (Ingestion points: Context7 API; Boundary markers: None identified; Capability inventory: Data retrieval; Sanitization: None identified).
- [NO_CODE]: The submitted file consists purely of markdown documentation and metadata. No executable scripts, binaries, or complex configuration files were provided for analysis.
Audit Metadata