run-deep-swe
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the DeepSWE benchmark corpus from
github.com/datacurve-ai/deep-sweand installs thedatacurve-piertool via PyPI or its GitHub repository. - [COMMAND_EXECUTION]: The skill executes several CLI commands, including
git clone,uv tool install, andpier run, to set up the environment and run the benchmarking agent. - [INDIRECT_PROMPT_INJECTION]: The skill processes external coding tasks which represents a surface for indirect prompt injection.
- Ingestion points: Task definitions are ingested from the
tasks/directory within the cloneddeep-swerepository (cloned inSKILL.md). - Boundary markers: The skill requires Docker to be running, noting that
piersandboxes each task in a Docker container by default to isolate execution. - Capability inventory: The skill uses
git(network/filesystem),uv(tool installation), andpier(subprocess execution) while communicating with the OpenRouter API. - Sanitization: The primary mitigation is the execution isolation provided by the
piertool's built-in Docker sandbox environment.
Audit Metadata