context7-docs
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill retrieves and processes external content from documentation platforms, creating a surface for indirect prompt injection.
- Ingestion points: External data enters via the mcp__context7__query-docs tool output as specified in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious embedded commands within the fetched content.
- Capability inventory: The skill uses MCP tools (mcp__context7__resolve-library-id and mcp__context7__query-docs) to interact with documentation sources.
- Sanitization: No explicit sanitization or validation of the retrieved content is specified.
Audit Metadata