context7

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl commands to interact with the Context7 API endpoints for searching libraries and retrieving documentation.
  • [EXTERNAL_DOWNLOADS]: The skill fetches external data (documentation, code snippets, and API metadata) from https://context7.com during its normal operation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from an external API, which presents a surface for indirect prompt injection.
  • Ingestion points: The content field returned by the https://context7.com/api/v2/context endpoint in references/api_reference.md is processed by the agent.
  • Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the retrieved documentation.
  • Capability inventory: The retrieved content is used to generate code examples and API explanations for the user.
  • Sanitization: There are no instructions for sanitizing or validating the Markdown content retrieved from the external service before it is presented to the user or used in response generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 08:52 PM