find-docs
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx ctx7@latestto download and execute the Context7 CLI tool from the npm registry at runtime. - [COMMAND_EXECUTION]: The skill executes shell commands to interact with the Context7 API, specifically using
npx ctx7@latest libraryandnpx ctx7@latest docsto search for and retrieve documentation. - [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation content retrieved from Context7.
- Ingestion points: The output of the
ctx7 docscommand is ingested into the agent context (SKILL.md). - Boundary markers: The instructions do not specify boundary markers or wrappers for the retrieved documentation content.
- Capability inventory: The skill uses subprocess calls to execute the
npxcommand. - Sanitization: There is no explicit sanitization or filtering of the content returned by the documentation lookup tool.
Audit Metadata