deep-research
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
uvxanduv runto execute shell commands for web searching and content retrieval. - [EXTERNAL_DOWNLOADS]: Dynamically installs and runs the
web-foragerandddgspackages from public registries at runtime to perform research tasks. - [EXTERNAL_DOWNLOADS]: Fetches web content through
r.jina.ai, an external well-known service used to convert HTML pages into LLM-friendly markdown. - [PROMPT_INJECTION]: Presents an indirect prompt injection surface (Category 8) because it ingests untrusted data from the web.
- Ingestion points: Content fetched from arbitrary URLs via
web-foragerorjina.aias described inSKILL.md. - Boundary markers: Absent; the instructions do not include specific delimiters or warnings to ignore instructions found within fetched web pages.
- Capability inventory: Subprocess execution via
uvxanduv run, and network operations viacurl. - Sanitization: None; the skill relies on the agent's internal safety guardrails to process external content safely.
Audit Metadata