context7-mcp
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions define a clear workflow for resolving library identifiers and querying specific documentation sections.
- [PROMPT_INJECTION]: The skill accesses external content from the Context7 documentation tool, which constitutes an indirect prompt injection surface. 1. Ingestion points: External documentation data enters the context via the query-docs tool output. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified in the markdown. 3. Capability inventory: The skill uses fetched data to provide accurate responses and code examples to the user. 4. Sanitization: Data is synthesized into natural language responses rather than being directly executed or passed to sensitive APIs. Given the source is a specialized documentation service provided by the vendor, this surface is consistent with the skill's utility.
Audit Metadata