mcp-context7-docs

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is benign, and the final data destination appears to be the official Context7 MCP endpoint, but the install path is inconsistent with the publisher and relies on an unverified third-party CLI installed via curl-to-shell. That supply-chain mismatch is disproportionate to a simple documentation lookup skill.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:36 PM
Package URL
pkg:socket/skills-sh/vaayne%2Fcc-plugins%2Fmcp-context7-docs%2F@189dd2a45f2cfa7c5f580c0bf65a7044c909e421
Security Audit — socket — mcp-context7-docs