deep-research-expert
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data during its research and audit phases, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads the entire scope of files provided for research or auditing as defined in Step 1 of
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" markers when reading untrusted file content.
- Capability inventory: The skill utilizes shell commands via
git(inreferences/code-review.md) and network fetching viacurlor similar tools (inreferences/source-ladder.md). - Sanitization: No sanitization, filtering, or validation of the processed content is specified before it is incorporated into the agent's context.
- [REMOTE_CODE_EXECUTION]: The skill fetches supplementary instruction sets from a remote repository.
- Finding: The agent is instructed in
references/source-ladder.mdto fetch a specific skill definition fromhttps://raw.githubusercontent.com/D1ZZY4/agent-skills/refs/heads/main/skills/context7-expert/SKILL.mdif it is not already installed. - Context: The resource is located in the official repository of the skill's author (
D1ZZY4). This represents the dynamic loading of instructions from a vendor-controlled remote source. - [COMMAND_EXECUTION]: The skill executes shell commands to perform technical code reviews.
- Finding:
references/code-review.mdusesgit rev-parse,git diff, andgit logto analyze changes between a fixed point and the current repository state. - Context: These are standard operations for code review tasks and are restricted to the local repository context.
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch information from a variety of external sources to verify claims.
- Finding:
references/source-ladder.mddefines a hierarchy for fetching data from live official documentation, repositories, and registries. - Safety: The skill includes explicit safety boundaries in
SKILL.mdto avoid transmitting secrets or proprietary code during these network operations.
Audit Metadata