context7-cli
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of the
ctx7CLI to perform its primary functions, including documentation retrieval and configuration management. - Evidence: Commands such as
ctx7 library,ctx7 docs,ctx7 skills, andctx7 setupare utilized throughout the skill's instructions. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external software and instructions from remote sources.
- Evidence: Instructions recommend installing the
ctx7CLI vianpm install -g ctx7@latestor executing it vianpx. - Evidence: The
ctx7 skills install /owner/repocommand downloads and installs additional agent skills directly from GitHub repositories. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting and processing external data from multiple sources.
- Ingestion points: Documentation content retrieved from the Context7 API, instruction files (skills) downloaded from GitHub repositories, and local project dependency files (
package.json,requirements.txt, etc.) read during thectx7 skills suggestprocess. - Boundary markers: No explicit boundary markers or "ignore instructions" delimiters are specified for the ingested content.
- Capability inventory: The agent can execute CLI commands, write to project configuration files (via
ctx7 setup), and install new instruction sets into the agent's skills directory. - Sanitization: The documentation explicitly warns the user and agent not to include sensitive or confidential information in search queries.
- [CREDENTIALS_UNSAFE]: The skill mentions the use of environment variables and CLI flags for managing authentication secrets.
- Evidence: Instructions document the use of
CONTEXT7_API_KEYand the--api-keyflag for handling API tokens.
Audit Metadata