Skills Explorer Add Skills

find-docs

An agent skill by upstash, from upstash/context7. Tags: api, developer-tools, documentation, research, validation.

What it does

Retrieves up-to-date documentation, API references, and code examples for any developer technology. Use this skill whenever the user asks about a specific library, framework, SDK, CLI tool, or cloud service — even for well-known ones like React, Next.js, Prisma, Express, Tailwind, Django, or Spring Boot. Your training data may not reflect recent API changes or version updates. Always use for: API syntax questions, configuration options, version migration issues, "how do I" questions mentioning a library name, debugging that involves library-specific behavior, setup instructions, and CLI tool usage. Use even when you think you know the answer — do not rely on training data for API details, signatures, or configuration options as they are frequently outdated. Always verify against current docs. Prefer this over web search for library documentation and API details.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add upstash/context7 --skill find-docs

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/upstash/context7
cp -r context7/skills/find-docs ~/.claude/skills/find-docs

Safety box score

Grade C, moderate risk: 37 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a thin wrapper around the Context7 CLI for fetching docs and examples. Its main risks are that it executes `npx ctx7@latest` from npm, sends your lookup queries to a remote service, and optionally supports a global install and API-key/OAuth login.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution2 (moderate)It runs a third-party CLI via `npx ctx7@latest ...`, so using the skill executes code fetched from npm rather than only local files.
Network access2 (moderate)The workflow queries Context7 remotely (`npx ctx7@latest library` / `docs`) and can also authenticate with `npx ctx7@latest login` or `CONTEXT7_API_KEY`.
Filesystem reach0 (none)The skill does not describe reading, writing, or deleting project files or user files beyond normal CLI output.
Secrets & credentials1 (low)It explicitly supports `export CONTEXT7_API_KEY=your_key` and `npx ctx7@latest login`, so users may expose or store credentials for the service.
Privilege & persistence2 (moderate)`npm install -g ctx7@latest` installs a package globally for the user, changing shared npm state outside the project.
Instruction hijack surface0 (none)I did not find prompt-injection text, hidden instructions, or attempts to bypass safeguards beyond normal workflow guidance.
Irreversible actions0 (none)The skill only looks up documentation; it does not itself publish, post, deploy, pay, or modify external systems.
Transparency2 (moderate)The actual CLI behavior is in an external `@latest` npm package, so the executed code is not fully visible in this skill review and can change over time.

Before installing

Rated 2026-10-16 by an automated review of 1 file from the skill's repository.

Source

Repository
upstash/context7 (all skills from this repository)
Path
skills/find-docs/SKILL.md
Branch
master
Updated
2026-09-23