deep-research
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to conduct 'deep research' on external topics, which necessitates ingesting data from untrusted third-party sources (e.g., websites, articles). This creates a surface for indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: The agent ingests data from external sources during the research process as specified in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content within research sources.
- Capability inventory: The skill instructs the agent to generate and write files (HTML and Markdown).
- Sanitization: There are no explicit instructions for the agent to sanitize or filter the content retrieved from external sources before including it in the generated reports.
Audit Metadata