skills/ruvnet/ruflo/deepseek-chat/Gen Agent Trust Hub

deepseek-chat

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill connects to api.deepseek.com to perform its core function. This is an official endpoint for a well-known AI service and is documented as the intended destination for API requests.
  • [COMMAND_EXECUTION]: The skill executes a local script at scripts/chat.mjs using the Bash tool. This is standard behavior for skill harnesses and does not involve the execution of arbitrary or untrusted code.
  • [INDIRECT_PROMPT_INJECTION]: The skill takes user-provided prompts and system messages as arguments. This is an inherent attack surface for LLM tools; however, the skill serves as a direct interface and does not include risky administrative or destructive capabilities. Ingestion points: --prompt and --system arguments. Boundary markers: None identified in the wrapper. Capability inventory: Bash execution for local scripts and network POST requests to the DeepSeek API. Sanitization: No input sanitization is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 02:25 PM
Security Audit — agent-trust-hub — deepseek-chat