context7-cli

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the ctx7 package globally using npm install -g ctx7@latest or run it via npx ctx7@latest. These are standard software distribution methods for developer tools.
  • [COMMAND_EXECUTION]: The skill relies on executing the ctx7 binary for its core functionality, including ctx7 library, ctx7 docs, and ctx7 setup. These commands facilitate documentation retrieval and local agent configuration.
  • [CREDENTIALS_SAFE]: The documentation mentions an environment variable CONTEXT7_API_KEY and a --api-key flag. It correctly advises the user to provide their own key and provides a placeholder (your_key or YOUR_KEY), which is a safe practice for secret management.
  • [DATA_EXFILTRATION]: While the skill makes network requests to the Context7 API to fetch documentation, it includes explicit instructions in references/docs.md warning the agent NOT to include sensitive or confidential information (API keys, passwords, proprietary code) in the queries sent to the external service.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 11:14 AM