context7-auto-research

SUSPICIOUS: the core purpose is plausible and the API target is consistent with documentation retrieval, but the skill is a community wrapper installed through transitive skill loading from a personal publisher rather than the official Context7/Upstash setup path. Main concerns are install trust and indirect prompt-injection exposure, not confirmed malware or credential theft.