context7

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the rg (ripgrep) utility to search for dependency versions within common repository files such as package.json, go.mod, and Cargo.toml. These search operations are restricted to identifying package metadata.
  • [EXTERNAL_DOWNLOADS]: The skill retrieves documentation from external library registries via structured MCP tools (resolve-library-id, query-docs). This behavior is consistent with the skill's stated purpose of providing documentation assistance.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or credential exfiltration were detected. The skill's operations are localized to version detection and documentation lookup.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 11:54 AM
Security Audit — agent-trust-hub — context7