Skills
skills/trancong12102/agentskills/context7/Socket

context7

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, and routing queries plus an API key to Context7 is proportionate, but the skill uses an unreviewed local Python wrapper and explicitly tells the agent not to inspect it. No clear malicious exfiltration is shown, yet execution trust is weaker than the official same-org Context7 clients.

Confidence: 85%Severity: 63%
Audit Metadata
Analyzed At
Mar 28, 2026, 02:32 PM
Package URL
pkg:socket/skills-sh/trancong12102%2Fagentskills%2Fcontext7%2F@14908e295315c04311a28cd45d4c27c3b0b92138