research
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several project-specific commands and build tools. These include
cargo xtask research scaffoldandcargo xtask research checkfor folder management and validation. It also executes a suite of documentation tools viabun(build, check:repo-links, tsc, and tests) and standardgitcommands for committing and pushing research dossiers. - [DATA_EXFILTRATION]: The skill performs legitimate data transfers consistent with its purpose. It gathers information from external sources using a built-in
deep-researchtool and pushes generated documentation to the vendor's repository. These operations are essential to the primary research and publishing function. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it ingests and synthesizes untrusted data from the web and the codebase.
- Ingestion points: External data is ingested via the
deep-researchtool; local codebase data is ingested viaExploreandgrepoperations. - Boundary markers: None explicitly defined in the instruction file to isolate the synthesized content from the agent's instructions.
- Capability inventory: The agent has the capability to write to the local filesystem (
docs/content/...), execute shell commands (bun,cargo,git), and push changes to a remote repository. - Sanitization: The skill does not mention specific sanitization or escaping of external content before processing, relying on the agent's internal safety guardrails.
Audit Metadata