context7

SUSPICIOUS: The core docs-fetching behavior and npm install path are mostly legitimate and verifiable, but the skill exceeds its stated purpose by including setup/auth flows and especially transitive installation of other skills. This is not confirmed malware, but it carries medium risk because it can expand the agent’s trust boundary beyond read-only documentation lookup.