← 返回 Skills 市场
Morrow Context7
作者
TimesAndPlaces
· GitHub ↗
· v1.0.0
· MIT-0
96
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install morrow-context7
功能描述
Look up current, accurate documentation and code examples for any library or framework using context7-mcp. Use when an agent needs to know how to use a libra...
安全使用建议
This skill appears to do what it says (fetch live docs) and needs only npx, but it will execute an npm package at runtime. Running `npx -y @upstash/context7-mcp` downloads and runs code from the registry each time — verify the package and publisher before use. Steps to reduce risk:
- Check the npm package page and repository for @upstash/context7-mcp and confirm ownership and recent activity.
- Verify that context7.com and the npm package are owned/endorsed by the same party (or by a trusted partner like Upstash).
- If possible, inspect the package source code (or pin to a specific vetted version) rather than running with `-y` which auto-accepts the latest.
- Run the tool in an isolated environment (sandbox/container) when first testing.
- Be cautious about sending sensitive project code or secrets to the tool; it queries remote servers and will transmit your query.
If you can't verify the package provenance or are uncomfortable with on-demand npm execution, treat this skill as untrusted until the upstream code and ownership are confirmed.
功能分析
Type: OpenClaw Skill
Name: morrow-context7
Version: 1.0.0
The skill provides a legitimate interface for the context7-mcp server to fetch library documentation and prevent AI hallucinations. It utilizes the '@upstash/context7-mcp' package via npx, which is a standard method for running Model Context Protocol (MCP) servers. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
Name, description, and SKILL.md consistently describe a documentation lookup tool. Required binary (npx) is appropriate for invoking an npm-hosted MCP client.
Instruction Scope
Runtime instructions are narrowly scoped to resolving library IDs and querying docs via the context7-mcp tool; they do not ask for unrelated files, environment variables, or broad system data. Recommendations (cache IDs, limit calls) are reasonable.
Install Mechanism
The skill relies on running `npx -y @upstash/context7-mcp` at runtime. npx will download and execute code from the npm registry (supply-chain risk). The package namespace (@upstash) and the skill homepage (context7.com) are not obviously the same publisher—this mismatch warrants provenance checks. No local install spec is provided, so code will be fetched dynamically each run.
Credentials
No credentials or sensitive environment variables are requested. The skill suggests storing an MCP command via an operator slash command (agent config) which is proportional to providing a tool endpoint.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It suggests configuring an MCP command in the agent, which is expected behavior and limited in scope.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install morrow-context7 - 安装完成后，直接呼叫该 Skill 的名称或使用
/morrow-context7触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of Morrow Context7 docs skill.
元数据
常见问题
Morrow Context7 是什么？
Look up current, accurate documentation and code examples for any library or framework using context7-mcp. Use when an agent needs to know how to use a libra... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 96 次。
如何安装 Morrow Context7？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install morrow-context7」即可一键安装，无需额外配置。
Morrow Context7 是免费的吗？
是的，Morrow Context7 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Morrow Context7 支持哪些平台？
Morrow Context7 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Morrow Context7？
由 TimesAndPlaces（@timesandplaces）开发并维护，当前版本 v1.0.0。
推荐 Skills