mcp-context7-docs

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is benign, and the final data destination appears to be the official Context7 MCP endpoint, but the install path is inconsistent with the publisher and relies on an unverified third-party CLI installed via curl-to-shell. That supply-chain mismatch is disproportionate to a simple documentation lookup skill.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Mar 13, 2026, 02:08 PM
Package URL
pkg:socket/skills-sh/vaayne%2Fcc-plugins%2Fmcp-context7-docs%2F@189dd2a45f2cfa7c5f580c0bf65a7044c909e421