context7
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with an external API andjqto parse the resulting JSON output. These commands are integral to the skill's documented workflow. - [EXTERNAL_DOWNLOADS]: The skill fetches software library documentation and search results from the
context7.comAPI. This is the primary function of the skill. - [DATA_EXFILTRATION]: Search queries and library identifiers are transmitted to
context7.comvia HTTP GET requests. While this is necessary for functionality, it involves sending user-supplied parameters to an external service. - [PROMPT_INJECTION]: The skill ingests technical documentation from an external source, creating a surface for indirect prompt injection.
- Ingestion points: Documentation content is fetched from
https://context7.com/api/v2/context(SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when the agent processes the fetched data.
- Capability inventory: The skill utilizes
curlfor network operations andjqfor data processing (SKILL.md). - Sanitization: The skill recommends URL-encoding parameters for request formatting, but no sanitization is performed on the content retrieved from the API.
Audit Metadata