deep-research

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [NO_CODE]: The skill consists entirely of markdown instructions and metadata. It contains no executable scripts (Python, Node.js, Shell, etc.) or binaries.
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to the direct interpolation of user input into automation commands.
  • Ingestion points: The $ARGUMENTS variable in SKILL.md.
  • Boundary markers: Absent; user-provided topics are passed directly to the research prompt.
  • Capability inventory: Tab management, mode selection, and interactive chat functionality via MQTT commands.
  • Sanitization: Absent; the instructions do not specify any validation or filtering of user input before it is used in the chat command.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 09:19 PM