deep-research-glim

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill instructions and associated metadata do not contain any detected malicious patterns, obfuscation, or unauthorized access attempts.\n- [PROMPT_INJECTION]: The skill operates by ingesting and processing untrusted content from external sources such as the web, GitHub, and social media. This is its primary intended function and represents a surface for indirect prompt injection.\n
  • Ingestion points: Data retrieved from the internet via the mcp__glim__* suite of tools and outputs from spawned subagents (SKILL.md).\n
  • Boundary markers: There are no explicit delimiters or specific instructions for subagents to ignore potential command-like structures within retrieved content.\n
  • Capability inventory: The skill utilizes the Task tool for spawning background subagents and the mcp__glim__* tools for external information retrieval (SKILL.md).\n
  • Sanitization: No specific filtering, escaping, or validation of the retrieved external content is described in the execution logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 04:58 PM
Security Audit — agent-trust-hub — deep-research-glim