context7-docs
An agent skill by upstash, from upstash/context7. Tags: api, debugging, development, documentation, setup.
What it does
Fetch up-to-date documentation and code examples for any library, framework, SDK, CLI tool, or cloud service. Use whenever the user asks about a specific library — even well-known ones like React, Next.js, Prisma, Express, Tailwind, Django, or Spring Boot — because training data may not reflect recent API changes or version updates. Always use for: API syntax questions, configuration options, version migration issues, "how do I" questions mentioning a library name, debugging that involves library-specific behavior, setup instructions, and CLI tool usage. Use even when you think you know the answer. Do not rely on training data for API details, signatures, or configuration options — they are frequently out of date. Prefer this over web search for library documentation.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add upstash/context7 --skill context7-docs
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/upstash/context7
cp -r context7/packages/pi/skills/context7-docs ~/.claude/skills/context7-docs
Safety box score
Grade B, low risk: 16 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is a documentation lookup wrapper around Context7, so its main effect is outbound network access to fetch library docs and examples. It does not ship executable code or local file-modifying logic, but it does send your lookup text to a remote service and relies on a `CONTEXT7_API_KEY` for authentication.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 0 (none) | The skill contains only markdown instructions; there are no bundled shell scripts, evaluators, or code-execution steps. |
| Network access | 2 (moderate) | It explicitly calls Context7 tools to "Resolve the library ID" and "Query the docs," which sends requests to `context7.com` and returns remote snippets. |
| Filesystem reach | 0 (none) | No file reads, writes, deletes, or home-directory/system path changes are described. |
| Secrets & credentials | 1 (low) | It warns that "Authentication uses the `CONTEXT7_API_KEY` environment variable" and that you must not pass "API keys, passwords, credentials, personal data, or proprietary code" in queries. |
| Privilege & persistence | 0 (none) | The skill does not request sudo, installs, services, shell startup edits, or other privilege changes. |
| Instruction hijack surface | 0 (none) | There is no instruction to ignore higher-priority rules, hide behavior, or follow remote instructions; it only prescribes a docs-lookup workflow. |
| Irreversible actions | 0 (none) | It only retrieves documentation and asks the agent to answer; it does not push, publish, post, pay, or delete anything. |
| Transparency | 1 (low) | The actual `resolve-library-id` and `query-docs` tool implementations are not included here, so their runtime behavior is not directly inspectable from the skill files. |
Before installing
- Confirm outbound requests to `context7.com` are acceptable in your environment.
- Check that `CONTEXT7_API_KEY` is stored securely and scoped only to this tool.
- Make sure you will not paste secrets or proprietary code into lookup queries.
Rated 2026-10-16 by an automated review of 1 file from the skill's repository.
Source
- Repository
- upstash/context7 (all skills from this repository)
- Path
- packages/pi/skills/context7-docs/SKILL.md
- Branch
- master
- Updated
- 2026-09-23
Related skills
- context7-mcp — This skill should be used when the user asks about libraries, frameworks, API references, or needs code examples.
- how — Use for "how does X work", code walkthroughs before changing something, and placement / ownership / layering questions ("where should this live".
- X MCP guide — ALWAYS read this when a user connects the X plugin or any X MCP, before using any X connection, and again on any X error.
- sandbox-next — Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.
- sandbox-stable — Build or maintain Cloudflare Sandbox apps on the stable @cloudflare/sandbox package.
- cursor-sdk — Guide users building apps, scripts, CI pipelines, or automations on top of the Cursor TypeScript SDK (`@cursor/sdk`).