docs-seeker

SUSPICIOUS: the core Context7 documentation-search purpose is plausible, but the skill requests broader local `.env` access than clearly needed and uses untrusted external documentation content to drive further agent actions. The main concern is disproportionate credential exposure and indirect prompt-injection risk, not confirmed malware or overt exfiltration.