kw-find-docs
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation or execution of the
ctx7package from the NPM registry. - [COMMAND_EXECUTION]: Shell commands are used to invoke the Context7 CLI tool (
ctx7 libraryandctx7 docs) to fetch documentation and resolve library identifiers. - [PROMPT_INJECTION]: The skill ingests documentation data from an external source, presenting an indirect prompt injection surface.
- Ingestion points: Documentation content is retrieved via CLI output from
ctx7 docsas defined inSKILL.md. - Boundary markers: The skill lacks explicit delimiters or instructions to treat the retrieved documentation as untrusted data.
- Capability inventory: The agent uses retrieved information to generate code and verify API signatures, which are sensitive operations.
- Sanitization: There is no evidence of sanitization or validation of the content returned by the external CLI tool before processing.
Audit Metadata