deep-research
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and metadata. It contains no executable scripts (Python, Node.js, Shell, etc.) or binaries.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to the direct interpolation of user input into automation commands.
- Ingestion points: The
$ARGUMENTSvariable inSKILL.md. - Boundary markers: Absent; user-provided topics are passed directly to the research prompt.
- Capability inventory: Tab management, mode selection, and interactive chat functionality via MQTT commands.
- Sanitization: Absent; the instructions do not specify any validation or filtering of user input before it is used in the
chatcommand.
Audit Metadata