deep-research
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to autonomously research, read, and synthesize information from external sources. This creates a surface for indirect prompt injection where malicious instructions embedded in web pages or documents could influence the agent's behavior.
- Ingestion points: External web content and search results retrieved and processed by the
scripts/research.pyscript. - Boundary markers: The skill does not define specific delimiters or "ignore instructions" markers for the data it processes.
- Capability inventory: Shell command execution for running Python scripts and network access via the
httpxlibrary. - Sanitization: There are no specific sanitization or validation protocols described for the external content being ingested.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands using
python3 scripts/research.pywith various arguments. This functionality relies on the integrity of the local script file within the skill package. - [EXTERNAL_DOWNLOADS]: The skill requires installing dependencies from a
requirements.txtfile. While the documentation mentionshttpx, the full content of the requirements file is not provided, posing a minor risk of installing unverified third-party packages.
Audit Metadata