anycap-deepresearch
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands for workflow orchestration and data processing.
- It instructs the agent to use standard utilities like
mkdirfor directory creation,teeandcatfor file management, andjqfor parsing JSON search results (found in01-plan.mdand02-gather.md). - It relies extensively on the vendor's
anycapCLI tool to perform search, crawl, and publishing operations across all reference files. - [EXTERNAL_DOWNLOADS]: The skill conducts network operations to fetch content and assets from remote sources.
- Instructions in
02-gather.mddescribe usingcurlto download images from arbitrary remote URLs discovered during the research process. - The
anycap searchandanycap crawlcommands are used to retrieve information from various external web domains. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process untrusted data from the internet.
- Ingestion points: Untrusted data enters the agent context through
anycap search,anycap crawl, andanycap actions video-readas specified in02-gather.md. - Boundary markers: There are no specific instructions or delimiters provided to help the agent distinguish between research content and operational instructions, increasing the risk of the agent following malicious commands embedded in search results or transcripts.
- Capability inventory: The skill possesses broad capabilities, including writing to the local file system, performing network requests, generating images, and publishing reports to the web via
anycap page deploy. - Sanitization: The instructions do not prescribe any sanitization or validation of external content before it is interpolated into reports or used for synthesis.
Audit Metadata