context7-cli

SUSPICIOUS. The skill is largely coherent with its stated purpose and uses official same-org npm/GitHub distribution, so it does not look malicious. The main risk is proportional but meaningful transitive trust: it can install additional skills from arbitrary GitHub repos and setup may execute another package, expanding the agent's trust boundary beyond the reviewed skill.