deepline-quickstart
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes lead data retrieved from the
dropleads_search_peopletool. This external data is then transformed and passed to thedeepline enrichcommand, creating an ingestion surface where untrusted content could influence subsequent agent actions. - Ingestion point:
deepline/data/quickstart_search.json(Output from external tool). - Boundary markers: Absent; the instructions do not explicitly tell the agent to ignore instructions embedded in the search results.
- Capability inventory: Subprocess execution (
deeplineCLI,python3), file system access, and network operations (via CLI tools). - Sanitization: The transformation script performs basic key extraction and URL normalization but does not filter or validate the textual content of the search results.
- [DYNAMIC_EXECUTION]: The skill generates and executes an inline Python script at runtime to transform search results.
- Evidence: Use of `python3
- <<'PY'` to execute logic that parses JSON and writes CSV files.
- [EXTERNAL_DOWNLOADS]: The skill installs the
deeplineCLI tool usingnpmfrom a remote registry. - Downloads configuration and packages from
code.deepline.comand the public npm registry. - [COMMAND_EXECUTION]: The skill relies on multiple shell commands to set up the environment and execute the demo, including global package installation and CLI tool invocation.
Audit Metadata