技能 fetching-library-docs

📦

fetching-library-docs

Name: fetching-library-docs
Author: Asmayaseen

內容修訂 r1 高風險 🌐 網路存取⚙️ 外部命令📁 檔案系統存取

擷取程式庫 API 文件

開發人員經常需要最新的 API 範例，而不想將完整文件載入模型上下文。此技能會擷取 Context7 程式庫文件，並回傳聚焦的範例、簽章與注意事項。

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "fetching-library-docs" from https://skillstore.io/skills/asmayaseen-fetching-library-docs.md and its manifest at https://skillstore.io/api/skills/asmayaseen-fetching-library-docs/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/asmayaseen-fetching-library-docs.md 已簽名 manifest GET /api/skills/asmayaseen-fetching-library-docs/manifest 已簽名 lockfile GET /api/skills/asmayaseen-fetching-library-docs/lockfile

測試它

正在使用「fetching-library-docs」。 Show me React useState examples.

預期結果:

一段精簡回應，包含從目前 Context7 文件中選出的 useState 範例、相符的 API 簽章與重點注意事項。

正在使用「fetching-library-docs」。 How does Next.js routing work?

預期結果:

簡短的概念概述，搭配幾個 routing 範例，以及相關 routing 概念之間的連結。

正在使用「fetching-library-docs」。 Find Prisma query syntax and important warnings.

預期結果:

針對 query 方法、代表性範例，以及安全或建議用法相關摘錄注意事項的聚焦摘要。

安全審計

高風險

v11 • 2026/7/9 開啟版本化報告

The skill has a legitimate purpose: fetching and filtering library documentation from Context7. Most static findings are false positives from markdown examples, awk output, and expected shell pipeline use, but the bundled generic MCP client exposes direct shell execution through --stdio, and the helper scripts use npx package execution plus predictable /tmp PID files.

已掃描檔案

1,364

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (3)

高

scripts/mcp-client.py:204-207 scripts/mcp-client.py:421-423

User-Controlled Stdio Command Execution

The generic MCP client accepts a --stdio command and starts it with subprocess.Popen using shell=True. Direct use of scripts/mcp-client.py can execute arbitrary shell commands, even though the main skill workflow uses a fixed Context7 command.

The command string comes from the --stdio argument and is passed to Popen with shell=True. This is a direct local command execution path when the helper is used outside the fixed wrapper scripts.

中

scripts/start-server.sh:15 scripts/fetch-raw.sh:35-38

Automatic Package Execution with npx

The skill starts Context7 by running npx -y @upstash/context7-mcp. This downloads or executes a package during skill use, which creates supply-chain and network execution risk if the package source is compromised.

The scripts explicitly use npx -y to execute the Context7 MCP package. This appears intentional, but it is still a real external package execution risk.

中

scripts/start-server.sh:6-16 scripts/stop-server.sh:6-16

Predictable PID File Can Target Local Processes

The start and stop scripts store a process id in /tmp/context7-mcp-${PORT}.pid and later pass that value to kill. A stale or tampered PID file could cause the stop script to terminate an unrelated local process.

The PID file path is predictable and located in /tmp, and stop-server.sh trusts its contents. The impact is local process termination rather than data theft.

能力複核項目 (21)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

scripts/mcp-client.py:204

Python subprocess.Popen

self._process = subprocess.Popen(

subprocess.Popen starts the user-supplied --stdio command with shell=True. Direct use of the helper can execute arbitrary local shell commands.

中

scripts/start-server.sh:9

Shell command substitution

if [ -f "$PID_FILE" ] && kill -0 $(cat "$PID_FILE") 2>/dev/null; then

The script reads a PID from a predictable /tmp file and uses it in process checks or status output. This is local operational risk if the PID file is stale or tampered.

中

scripts/start-server.sh:10

Shell command substitution

echo "Context7 MCP already running on port $PORT (PID: $(cat $PID_FILE))"

The script reads a PID from a predictable /tmp file and uses it in process checks or status output. This is local operational risk if the PID file is stale or tampered.

中

scripts/start-server.sh:20

Shell command substitution

if kill -0 $(cat "$PID_FILE") 2>/dev/null; then

The script reads a PID from a predictable /tmp file and uses it in process checks or status output. This is local operational risk if the PID file is stale or tampered.

中

scripts/start-server.sh:21

Shell command substitution

echo "Context7 MCP started on port $PORT (PID: $(cat $PID_FILE))"

The script reads a PID from a predictable /tmp file and uses it in process checks or status output. This is local operational risk if the PID file is stale or tampered.

中

scripts/start-server.sh:6

Temp directory access

PID_FILE="/tmp/context7-mcp-${PORT}.pid"

The script writes a predictable PID file under /tmp. This can be tampered with by local users and affects later process-control decisions.

中

scripts/stop-server.sh:9

Shell command substitution

PID=$(cat "$PID_FILE")

The script trusts a PID read from a predictable /tmp file before terminating a process. A tampered PID file could target an unrelated local process.

中

scripts/stop-server.sh:12

Standard device file access

kill "$PID" 2>/dev/null

The stop script uses a predictable /tmp PID file or process-name matching to terminate local processes. This creates local process-control risk.

中

scripts/stop-server.sh:16

Standard device file access

kill -9 "$PID" 2>/dev/null || true

The stop script uses a predictable /tmp PID file or process-name matching to terminate local processes. This creates local process-control risk.

中

scripts/stop-server.sh:25

Standard device file access

pkill -f "context7-mcp.*--port.*${PORT}" 2>/dev/null && echo "Context7 MCP stopped" || echo "Context

The stop script uses a predictable /tmp PID file or process-name matching to terminate local processes. This creates local process-control risk.

中

scripts/stop-server.sh:6

Temp directory access

PID_FILE="/tmp/context7-mcp-${PORT}.pid"

The stop script uses a predictable /tmp PID file or process-name matching to terminate local processes. This creates local process-control risk.

低

scripts/mcp-client.py:146

HTTP client library

def request(self, method: str, params: Optional[dict] = None) -> dict: