deep-research
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to invoke research tools like
geminiandchromux. It manages browser sessions and executes scripts for data extraction and synthesis. - [EXTERNAL_DOWNLOADS]: The skill leverages the
@team-attention/chromuxpackage vianpxif it is not already installed on the system. The package is provided by the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process large amounts of data from external websites.
- Ingestion points: Data is collected from
WebSearch,WebFetch, and dynamic content extracted viachromuxbrowser sessions (SKILL.md). - Boundary markers: The skill does not define explicit delimiters or instructions to ignore potential commands embedded in the retrieved web content.
- Capability inventory: The orchestrator has access to
Bashfor running research scripts, while subagents utilize web search and browser tools. - Sanitization: No sanitization or content filtering is performed on the ingested web data before it is presented to the agent for synthesis.
Audit Metadata