research
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a set of shell scripts (
parallel-research,export-pdf) and system utilities likepandoc,jq, andlnto perform research activities and manage output files. - [REMOTE_CODE_EXECUTION]: Installation instructions include fetching the
uvtool from a remote source via a shell script. Additionally, the skill usesuvxto dynamically download and execute Python dependencies at runtime for PDF conversion. - [PERSISTENCE]: The skill uses cron jobs to schedule future agent actions for research polling and modifies the user's shell profile (
~/.bashrc) to persist API configurations. - [DYNAMIC_EXECUTION]: A Python script is dynamically generated and executed via a bash heredoc in the
export-pdfutility to facilitate document processing using thepymupdflibrary. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process content from web searches and third-party API reports, creating a surface for indirect prompt injection.
- Ingestion points: Fetches data from external web sources and markdown reports via the Parallel AI API.
- Boundary markers: No specific delimiters or safety instructions are defined to separate ingested data from agent commands.
- Capability inventory: Includes file system access, network communication, and execution of internal scripts.
- Sanitization: External data is incorporated into research documents without dedicated validation or filtering routines.
Audit Metadata