context7-cli
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the
ctx7package globally usingnpm install -g ctx7@latestor run it vianpx ctx7@latest. These are standard software distribution methods for developer tools. - [COMMAND_EXECUTION]: The skill relies on executing the
ctx7binary for its core functionality, includingctx7 library,ctx7 docs, andctx7 setup. These commands facilitate documentation retrieval and local agent configuration. - [CREDENTIALS_SAFE]: The documentation mentions an environment variable
CONTEXT7_API_KEYand a--api-keyflag. It correctly advises the user to provide their own key and provides a placeholder (your_keyorYOUR_KEY), which is a safe practice for secret management. - [DATA_EXFILTRATION]: While the skill makes network requests to the Context7 API to fetch documentation, it includes explicit instructions in
references/docs.mdwarning the agent NOT to include sensitive or confidential information (API keys, passwords, proprietary code) in the queries sent to the external service.
Audit Metadata