research-outline
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard research framework using built-in agent tools (Read, Write, Task, AskUserQuestion) to generate YAML configuration files. All operations are confined to the current project context.
- [DATA_VALIDATION]: The included
validate_json.pyscript is a utility for ensuring consistency between generated research results and the defined schema. It usesyaml.safe_load()which is a secure practice for parsing configuration files and prevents unsafe deserialization attacks. - [REMOTE_CODE_EXECUTION]: While the skill uses the
Tasktool to launch a background research agent, this is a standard platform capability. The prompt for the subagent is transparently documented and does not contain shell escape sequences or remote execution triggers. - [DATA_EXPOSURE]: The skill uses the
Readtool to ingest user-supplied field definitions. This is gated by anAskUserQuestioninteraction, ensuring the user is aware of and approves the file access.
Audit Metadata