context7
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.context7.comandmcp.context7.comto retrieve documentation and library search results. These are functional requirements for the skill's stated purpose and target the vendor's own infrastructure. - [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a local script (
scripts/context7.ts) using thebunruntime. The script processes user-provided strings for library names and queries, which are properly encoded before being sent in API requests. - [DATA_EXFILTRATION]: While the skill performs network operations, it does not access sensitive local files, environment variables (other than its own API key), or credentials. It only transmits search queries and library identifiers provided by the user.
Audit Metadata