context7-auto-research

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is plausible, but this wrapper skill mainly tells the agent/user to install a different skill from a personal archived GitHub repo through a community CLI. Data flow appears intended for Context7, not an obvious proxy, but the transitive install chain and unpinned personal-repo source make trust disproportionate to a simple documentation-fetching skill.

Confidence: 90%Severity: 64%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:20 AM
Package URL
pkg:socket/skills-sh/googyosoo%2Fantigravity-skills%2Fcontext7-auto-research%2F@5b3a035ec2715699a5a9fedd133b3f9372f55f5d1349fa4f6ef4d2696b59062c
Security Audit — socket — context7-auto-research