context7
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch thectx7package from the NPM registry to resolve library documentation. As this is the vendor's own utility, the download is documented as part of the intended functionality.\n- [COMMAND_EXECUTION]: The skill executes the shell commandnpx ctx7 resolve {library_name}to dynamically retrieve documentation via the command line interface.\n- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) because it ingests and processes untrusted documentation from external sources.\n - Ingestion points: External documentation is retrieved via
mcp-deepwiki, thectx7utility, and web searches as specified inSKILL.md.\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the skill definition to protect against malicious instructions in the fetched data.\n
- Capability inventory: The agent has the capability to execute CLI commands (
npx) as part of its primary function.\n - Sanitization: There is no evidence of sanitization, validation, or filtering of the external content before it is processed by the agent.
Audit Metadata