CLAIM-2026-08-24-03

Per the VulnCheck advisory, an attacker who poisons Context7's Custom AI Instructions can cause a connected agent, during a routine library-documentation request, to exfiltrate credentials from environment files to an attacker-controlled service and to perform destructive file deletion on the victim's machine.

Why it matters

The trigger is an ordinary, unattended action - asking the agent for current docs - so there is no suspicious user step to catch it at.

Sources

• vulncheck2026context