ClawHub

Context7 MCP Skill

v1.0.0

Query up-to-date library documentation and code examples using Context7 MCP. Use when you need current, version-specific documentation for npm packages, Pyth...

⭐ 0· 388·2 current·2 all-time
by@jolestar
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: SKILL.md shows how to resolve library IDs and query docs at mcp.context7.com/mcp via a fixed command (context7-mcp-cli) or the uxc fallback. The required behavior (calling an external documentation MCP) aligns with the stated purpose.
✓
Instruction Scope
Runtime instructions are narrowly scoped to: check/create the fixed link command via the uxc skill, call context7-mcp-cli resolve-library-id and query-docs, and parse responses. The skill does not instruct reading arbitrary local files, harvesting system env vars, or exfiltrating data beyond calling the documented external endpoint. It does require network access to mcp.context7.com/mcp, which is expected for this purpose.
✓
Install Mechanism
There is no install specification; the skill is instruction-only. The only script included (scripts/validate.sh) is a repo validation helper and is not executed at runtime by the agent. No downloads or archive extracts are present.
ℹ
Credentials
The skill requests no environment variables or credentials itself, which is proportionate. It does depend on the external 'uxc' skill/tool being present; that tool may have its own network/credential requirements not declared here. Users should verify the trustworthiness and requirements of uxc before using this skill.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills' configs, and has no install-time persistence. The only operational side-effect is creating a fixed-link command via uxc (uxc link context7-mcp-cli ...), which is scoped to uxc's linking mechanism.
Assessment
This skill appears to do what it says: it uses the uxc tool to invoke Context7's MCP at mcp.context7.com/mcp to resolve library IDs and query docs. Before installing or invoking it: 1) Confirm you trust the external endpoint (mcp.context7.com) because queries (including code snippets or questions) will be sent there. 2) Check the 'uxc' tool/skill (a required dependency) for its own network/credential behaviors—uxc may require account credentials or other permissions not declared by this skill. 3) Avoid sending secrets or private code in queries to the external service. 4) If you need to restrict outbound network access, block calls to the MCP endpoint or avoid installing this skill. The included validate.sh is only a local repo lint/validation script (requires ripgrep) and is not executed by the agent at runtime.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bh456remjjzz7w4ptp7ef1n827xnd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments