deepline-plays
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources such as web pages, people databases, and registries to populate research claims.
- Ingestion points: External data is ingested through various retrieval tools like
official_web,people_database, andpublic_registrydescribed inreferences/adaptive-research.mdandjobs/finding.md. - Boundary markers:
plays/shared/rerank.tsuses<untrusted_content>tags to delimit external data and provides an explicitSECURITYwarning to the LLM judge regarding potential adversarial content. - Capability inventory: The skill framework enables executing provider tools, writing to durable datasets, and generating outreach copy using
deeplineagent. - Sanitization: The
plays/shared/rerank.tsfile includes anescapeUntrustedfunction to escape angle brackets, andplays/shared/research-experiment.tsensures that claim values are literally matched against raw source text. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
deeplineCLI using a custom NPM registryhttps://code.deepline.com/api/v2/npm/. This domain is associated with the vendor and is a standard distribution channel for their tools. - [COMMAND_EXECUTION]: The instructions include usage of the
deeplineCLI for authentication, play execution, and inspecting runtime data using thedeepline db querycommand. - [DYNAMIC_EXECUTION]: The skill architecture involves the creation of TypeScript
.play.tsfiles which are executed by the platform's managed runtime; this is the primary intended functionality of the skill.
Audit Metadata