research-prompt

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user data and project-specific context to create a self-contained prompt for a 'deep researcher' agent.
  • Ingestion points: The skill pulls context from conversation history, project files, and user-provided 'vague research needs' to fill its template.
  • Boundary markers: The resulting prompt lacks explicit instructions or delimiters to prevent the downstream agent from following malicious instructions that might be embedded in the user-supplied research topic or facts.
  • Capability inventory: The generated output is intended for execution via external research services (specifically mentioned as DeepAPI), which perform network-based searches and data retrieval.
  • Sanitization: There are no mechanisms described for sanitizing, escaping, or validating the input data before it is formatted into the final research brief.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 05:17 AM