lookup
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides an
updateaction that executes a shell script (scripts/update.sh) to manage thectx7CLI tool. This script performs routine maintenance tasks including version verification and global package installation vianpm. - [EXTERNAL_DOWNLOADS]: The
updatescript retrieves reference content from the Upstash GitHub repository. These downloads originate from a well-known service and are used for drift detection against the skill's local vendor baselines. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile uses the!command syntax to executectx7 --versionat load time. This is a benign implementation used solely to report the current installation status of the required CLI to the agent. - [INDIRECT_PROMPT_INJECTION]: The skill processes documentation from the Context7 API, creating a vulnerability surface for indirect prompt injection.
- Ingestion points:
ctx7 docsCLI command andmcp__context7__query-docstool (SKILL.md). - Boundary markers: The skill instructs the agent to ground answers in retrieved content and notify the user of fallback scenarios.
- Capability inventory: The agent possesses the capability to execute specific shell commands and use retrieved documentation for natural language generation.
- Sanitization: No specific input sanitization or filtering of the API output is described.
Audit Metadata