Skills context7
📦
context7
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access
Find Current Library Documentation
Developers often need current API details that model training may not include. This skill retrieves Context7 documentation for libraries, frameworks, and components.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "context7" from https://skillstore.io/skills/intellectronica-context7.md and its manifest at https://skillstore.io/api/skills/intellectronica-context7/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "context7". Find current React hooks guidance for state updates.
Expected outcome:
A concise summary of the current hook rules, update patterns, and references to the most relevant Context7 results.
Using "context7". Research Next.js app router behavior for nested layouts.
Expected outcome:
A focused explanation of routing concepts, layout persistence, and items to verify before implementation.
Using "context7". Check FastAPI dependency injection documentation for a service layer.
Expected outcome:
A practical review of dependency declarations, lifecycle notes, and documentation-backed implementation cautions.
Security Audit
Medium Riskv4 • 7/5/2026 Open versioned report
The skill has a legitimate documentation retrieval purpose, but it depends on outbound requests to context7.com and shell command examples. I confirmed the actual curl and jq command examples plus hardcoded Context7 URLs, while most Ruby backtick detections are Markdown false positives. The main added concern is unsafe substitution of user-provided query values into shell commands without strong quoting guidance.
1
Files scanned
86
Lines analyzed
13
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Unescaped Shell Parameter Substitution
The workflow asks users or agents to replace LIBRARY_NAME, LIBRARY_ID, and TOPIC inside double-quoted curl URLs. User-supplied values with shell metacharacters could be interpreted before curl runs unless fully URL-encoded and safely quoted.
The skill uses explicit placeholders in shell command templates and only gives limited URL-encoding guidance. The risk depends on whether an agent executes the commands with raw user text, so confidence is high but not absolute.
Capability review items (13)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
```bash
This range contains a shell command example using curl and often jq against context7.com with placeholders. It is not Ruby backtick execution, but the skill does instruct external command use with user-derived parameters.
Medium
Ruby/shell backtick execution
```bash
This range contains a shell command example using curl and often jq against context7.com with placeholders. It is not Ruby backtick execution, but the skill does instruct external command use with user-derived parameters.
Medium
Ruby/shell backtick execution
```bash
This range contains a shell command example using curl and often jq against context7.com with placeholders. It is not Ruby backtick execution, but the skill does instruct external command use with user-derived parameters.
Medium
Ruby/shell backtick execution
```bash
This range contains a shell command example using curl and often jq against context7.com with placeholders. It is not Ruby backtick execution, but the skill does instruct external command use with user-derived parameters.
Medium
Ruby/shell backtick execution
```bash
This range contains a shell command example using curl and often jq against context7.com with placeholders. It is not Ruby backtick execution, but the skill does instruct external command use with user-derived parameters.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/libs/search?libraryName=LIBRARY_NAME&query=TOPIC" | jq '.result
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/context?libraryId=LIBRARY_ID&query=TOPIC&type=txt"
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/libs/search?libraryName=react&query=hooks" | jq '.results[0].id
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/context?libraryId=/websites/react_dev_reference&query=useState&
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/libs/search?libraryName=nextjs&query=routing" | jq '.results[0]
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/context?libraryId=/vercel/next.js&query=app+router&type=txt"
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/libs/search?libraryName=fastapi&query=dependencies" | jq '.resu
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Low
Hardcoded URL
curl -s "https://context7.com/api/v2/context?libraryId=/fastapi/fastapi&query=dependency+injection&t
The line contains a curl request to the hardcoded Context7 API domain. This is expected for the skill, but it is still an outbound network dependency that discloses library names and queries.
Risk Factors
⚙️ External commands (23)
SKILL.md:18-20 SKILL.md:20-23 SKILL.md:23-24 SKILL.md:24-27 SKILL.md:27 SKILL.md:28-29 SKILL.md:29-30 SKILL.md:30-36 SKILL.md:36-38 SKILL.md:38-41 SKILL.md:41-42 SKILL.md:42-43 SKILL.md:43 SKILL.md:49-56 SKILL.md:56-60 SKILL.md:60-66 SKILL.md:66-70 SKILL.md:70-76 SKILL.md:76-80 SKILL.md:80-81 SKILL.md:81-82 SKILL.md:82-84 SKILL.md:84
🌐 Network access (9)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/intellectronica-context7/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/intellectronica-context7?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/intellectronica-context7?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/intellectronica-context7/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/intellectronica-context7.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
intellectronica. (2026). context7 security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/intellectronica-context7/audits/4BibTeX citation
@techreport{intellectronica-intellectronica-context7-2026,
author = {intellectronica},
title = {context7 security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/intellectronica-context7/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "context7 security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "intellectronica"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/intellectronica-context7/audits/4"
identifiers:
- type: other
value: "skillstore:intellectronica-context7:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
3 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
Dwsy Recommended
dwsy-context7
Skillstore Score 79
Evidence Confidence High
Skillstore usage 12
Updated
2026-08-21
intellectronica Current
intellectronica-context7
Skillstore Score 50
Evidence Confidence High
Skillstore usage 10
Updated
2026-08-21
am-will-context7
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Check Current API Usage
Look up the latest documented behavior before writing or reviewing code.
Research Framework Features
Find official examples for routing, hooks, dependencies, or similar framework topics.
Support Code Migration Work
Verify changed library APIs while planning updates across a codebase.
Try These Prompts
Find One Topic
Use Context7 to find current documentation for React useState. Summarize the key usage rules and common mistakes.
Verify Framework Guidance
Use Context7 to retrieve current Next.js app router documentation. Explain when to use layouts, pages, and route handlers.
Validate an Implementation Plan
Use Context7 to check FastAPI dependency injection guidance. Compare the documented approach with my planned dependency structure.
Research a Migration
Use Context7 to research the current migration guidance for the named library. Identify breaking changes, replacement APIs, and review risks.
Best Practices
- Use specific library names and focused topics for better Context7 ranking.
- Inspect search results before selecting a library ID for documentation retrieval.
- URL-encode all query values before running shell commands.
Avoid
- Do not paste secrets, tokens, or private project data into documentation queries.
- Do not assume the first search result is always the correct package.
- Do not execute generated shell commands without checking parameter encoding.
Frequently Asked Questions
What does this skill do?
It helps retrieve current documentation from Context7 for software libraries, frameworks, and components.
Does it require an API key?
No. The documented basic usage does not require an API key, but it is rate-limited.
Does it send data outside my environment?
Yes. Library names and search topics are sent to context7.com when the commands are run.
Can it find private documentation?
No. It can only retrieve documentation that Context7 has indexed and exposes through its API.
Which tools can use this skill?
The report lists support for Claude, Codex, and Claude Code.
How should I handle command parameters?
URL-encode parameters and review shell commands before execution, especially when values come from user input.
Developer Details
Author
intellectronicaLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
a25199bc7d6b82598536822d1738eb5d5f54025b
Maintenance freshness
7/18/2026
Usage
7 downloads · 143 views
File structure
📄 SKILL.md