insane-research-main
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a sophisticated 7-phase research process including scoping, retrieval, triangulation, and synthesis. All network operations are directed at well-known services (Google, GitHub, Reddit, Twitter, Jina Reader) for legitimate data gathering purposes.
- [SAFE]: The skill uses local Python scripts (
validate_ledger.py,orchestrator.py) to manage session state and verify claims. These scripts operate exclusively on files within the skill's own research directories and do not access sensitive system files or environment variables. - [SAFE]: The documentation mentions optional dependencies on well-known packages like
yt-dlpandcurl_cffifor specific media and scraping tasks, which is standard for developer-oriented tools. - [SAFE]: While the skill processes untrusted web data (indirect prompt injection surface), it employs a mandatory 'Verified-only synthesis gate' where a deterministic Python script (
validate_ledger.py) must produce a verification signature before the AI generates the final report. This significantly mitigates the risk of external content influencing the agent's behavior. - [SAFE]: The skill uses structured data (JSON/JSONL) for intermediate storage and provides clear evaluation metrics to check for hallucinations or unverified claims.
Audit Metadata