context7
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlcommands to interact with the Context7 API endpoints for searching libraries and retrieving documentation. - [EXTERNAL_DOWNLOADS]: The skill fetches external data (documentation, code snippets, and API metadata) from
https://context7.comduring its normal operation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from an external API, which presents a surface for indirect prompt injection.
- Ingestion points: The
contentfield returned by thehttps://context7.com/api/v2/contextendpoint inreferences/api_reference.mdis processed by the agent. - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the retrieved documentation.
- Capability inventory: The retrieved content is used to generate code examples and API explanations for the user.
- Sanitization: There are no instructions for sanitizing or validating the Markdown content retrieved from the external service before it is presented to the user or used in response generation.
Audit Metadata