deep-research-glim
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and associated metadata do not contain any detected malicious patterns, obfuscation, or unauthorized access attempts.\n- [PROMPT_INJECTION]: The skill operates by ingesting and processing untrusted content from external sources such as the web, GitHub, and social media. This is its primary intended function and represents a surface for indirect prompt injection.\n
- Ingestion points: Data retrieved from the internet via the
mcp__glim__*suite of tools and outputs from spawned subagents (SKILL.md).\n - Boundary markers: There are no explicit delimiters or specific instructions for subagents to ignore potential command-like structures within retrieved content.\n
- Capability inventory: The skill utilizes the
Tasktool for spawning background subagents and themcp__glim__*tools for external information retrieval (SKILL.md).\n - Sanitization: No specific filtering, escaping, or validation of the retrieved external content is described in the execution logic.
Audit Metadata