context7
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external documentation service and presents it to the agent, creating a risk that malicious instructions in the documentation could be followed by the agent.\n
- Ingestion points: External content is retrieved via
resolveViaMcpandqueryDocsViaMcpinscripts/context7.ts.\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the documentation text as untrusted data.\n
- Capability inventory: The skill grants the agent command execution and network access.\n
- Sanitization: The script does not perform sanitization or filtering on the fetched documentation content.\n- [COMMAND_EXECUTION]: The skill requires the agent to execute local shell commands via the
bunruntime to perform its functions.
Audit Metadata