Access up-to-date documentation and code examples for any programming library or framework. Discover the most relevant packages for your projects using reputation and quality scores. Simplify the search for technical information by resolving package names to direct documentation queries.
| Field | Value |
|---|---|
| Grade | C |
| Risk Score | 25 |
| Version | smithery |
| Vendor | Smithery |
| Source | composio-context7 |
| Scan Date | 2026-05-08 |
| Scanner | tooltrust-scanner/v0.3.9 |
| Severity | Count |
|---|---|
| Critical | 0 |
| High | 1 |
| Medium | 2 |
| Low | 1 |
| Info | 2 |
Severity: Medium
Description: tool declares db permission
Recommendation: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
Severity: Info
Description: Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.
Recommendation: Review and remediate the identified issue.
Severity: High
Description: tool declares network permission
Recommendation: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
Severity: Medium
Description: tool declares db permission
Recommendation: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
Severity: Low
Description: tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
Recommendation: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.
Severity: Info
Description: Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.
Recommendation: Review and remediate the identified issue.
Scored using ToolTrust methodology · Raw JSON report