deep-research
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a standard research workflow using established MCP tools (firecrawl and exa) for searching and scraping. All operations align with the stated purpose of research synthesis and do not involve unauthorized actions or data exfiltration. References to configuration files like ~/.claude.json are used solely for tool setup documentation.
- [PROMPT_INJECTION]: The skill interacts with untrusted web content which constitutes an indirect prompt injection surface.
- Ingestion points: Data is ingested via firecrawl_scrape and crawling_exa tools as described in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands in scraped content are provided.
- Capability inventory: The agent can synthesize content into reports and save them to local files.
- Sanitization: No explicit sanitization or filtering of external content is mentioned. While this surface exists, it is inherent to the skill's primary research function and no malicious instructions were found within the skill itself.
Audit Metadata