deep-research

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to invoke research tools like gemini and chromux. It manages browser sessions and executes scripts for data extraction and synthesis.
  • [EXTERNAL_DOWNLOADS]: The skill leverages the @team-attention/chromux package via npx if it is not already installed on the system. The package is provided by the skill author.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process large amounts of data from external websites.
  • Ingestion points: Data is collected from WebSearch, WebFetch, and dynamic content extracted via chromux browser sessions (SKILL.md).
  • Boundary markers: The skill does not define explicit delimiters or instructions to ignore potential commands embedded in the retrieved web content.
  • Capability inventory: The orchestrator has access to Bash for running research scripts, while subagents utilize web search and browser tools.
  • Sanitization: No sanitization or content filtering is performed on the ingested web data before it is presented to the agent for synthesis.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 10:42 AM