skills/ruvnet/ruflo/deep-research/Gen Agent Trust Hub

deep-research

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize untrusted data from external sources and the local filesystem.
  • Ingestion points: The skill retrieves data using WebSearch, WebFetch, and the Read tool to examine source files.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing data from these external sources.
  • Capability inventory: The skill has the ability to Write findings, execute Bash commands, and store data in several memory and pattern-storage plugins.
  • Sanitization: No explicit sanitization or filtering of external content is described before the data is cross-referenced or stored.
  • [COMMAND_EXECUTION]: The skill uses shell tools for local file analysis.
  • Evidence: Step 4 of the research process in SKILL.md utilizes the Bash tool for running grep and find to analyze the codebase.
  • [EXTERNAL_DOWNLOADS]: The skill fetches information from the internet as a core function.
  • Evidence: The research workflow in SKILL.md uses WebSearch and WebFetch to collect data for each research sub-question.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 01:05 PM