deep-research
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a workflow that fetches and synthesizes content from external websites via firecrawl and exa tools, creating an attack surface for indirect prompt injection.\n
- Ingestion points: Web content is retrieved in Step 3 (search) and Step 4 (scrape) of the research workflow as documented in SKILL.md.\n
- Boundary markers: The instructions lack delimiters or safety markers (such as "ignore embedded instructions") to help the agent distinguish between its own system instructions and the content retrieved from external sources.\n
- Capability inventory: The skill utilizes web search/scrape tools and has the capability to write synthesized reports, potentially to local files.\n
- Sanitization: No sanitization or filtering logic is specified for the content fetched from the web before it is processed by the agent.
Audit Metadata