context7
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
ctx7package globally from the NPM registry usingnpm install -g ctx7@latest. While NPM is a standard registry, the package is an external third-party dependency.\n- [REMOTE_CODE_EXECUTION]: The skill utilizesnpx ctx7@latestto dynamically download and execute code from the NPM registry at runtime.\n- [COMMAND_EXECUTION]: The skill performs shell command execution to interact with the Context7 service using CLI commands likectx7 libraryandctx7 docs.\n- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection (Category 8) because it interpolates user-controlled data into shell command arguments for documentation queries. - Ingestion points: User input is used for the
<name>,<libraryId>, and<query>arguments. - Boundary markers: Examples use double quotes around queries, but the skill lacks technical instructions for escaping shell-sensitive characters.
- Capability inventory: The skill executes shell commands via
npm,npx, and thectx7CLI. - Sanitization: No technical sanitization is implemented; the skill relies on high-level prompt instructions to avoid sensitive data in queries.
Audit Metadata