deep-research
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize untrusted data from external sources and the local filesystem.
- Ingestion points: The skill retrieves data using
WebSearch,WebFetch, and theReadtool to examine source files. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing data from these external sources.
- Capability inventory: The skill has the ability to
Writefindings, executeBashcommands, and store data in several memory and pattern-storage plugins. - Sanitization: No explicit sanitization or filtering of external content is described before the data is cross-referenced or stored.
- [COMMAND_EXECUTION]: The skill uses shell tools for local file analysis.
- Evidence: Step 4 of the research process in
SKILL.mdutilizes theBashtool for runninggrepandfindto analyze the codebase. - [EXTERNAL_DOWNLOADS]: The skill fetches information from the internet as a core function.
- Evidence: The research workflow in
SKILL.mdusesWebSearchandWebFetchto collect data for each research sub-question.
Audit Metadata