deep-research
Warn
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The
scripts/chartrender.pyscript allows the agent to write and execute custom Python scripts (B scripts) for rendering charts. This is a core feature for visualization but involves runtime code execution via a subprocess. The skill mitigates this by scanning for forbidden tokens such assocket,eval, andsubprocesswithin the generated code and scrubbing the environment variables to prevent credential leakage.- [COMMAND_EXECUTION]: Multiple scripts within the skill utilizesubprocess.runto perform their tasks.scripts/chartrender.pyexecutes custom chart scripts, whilesmoke_dr.pyexecutes internal skill scripts likeevidence.pyandaminer_open.pyfor automated testing and verification.- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted data from the web and the AMiner API. - Ingestion points: Data is ingested via
scripts/aminer_open.pyand the host'sWebFetchtool. - Boundary markers: The instructions define a strict research loop requiring verbatim excerpts, source tagging, and citation-faithfulness verification to prevent the model from obeying instructions hidden in data.
- Capability inventory: The skill can execute commands via
subprocess.run, perform network calls, and write files to the system. - Sanitization: A token blacklist and environment scrubbing are applied to dynamically generated code.- [EXTERNAL_DOWNLOADS]: The client script
scripts/aminer_open.pycommunicates with the official AMiner API atdatacenter.aminer.cn. As this is the vendor's own infrastructure and necessary for the skill's stated purpose, it is documented here as a primary network ingestion point.
Audit Metadata