docs-seeker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path runs node scripts/fetch-docs.js "<user query>", which performs HTTPS GETs to context7.com and ingests the returned llms.txt content (outsider-authored public web content) into the agent context via llms.txt/piped output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The fetch-docs.js script makes runtime HTTPS requests to context7.com (e.g. https://context7.com/{org}/{repo}/llms.txt and https://context7.com/{path}/llms.txt?topic={keyword}) and the returned llms.txt content is parsed and used to determine which URLs/agents to run, so the external content directly controls the agent workflow.