deep-research
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation defines several commands for executing a local script
scripts/research.pyto initiate research tasks, check status, and list results.- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of Python dependencies from arequirements.txtfile, including thehttpxlibrary, which is a common network request package.- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection through its core functionality. Ingestion points: Data enters the system via the--querycommand-line argument and through external content retrieved from the web during the 'Deep Research' phase. Boundary markers: No specific delimiters or instructions to ignore embedded commands are documented for the query input or the synthesized research data. Capability inventory: The skill executes subprocesses (scripts/research.py) and performs network operations (API calls and web crawling). Sanitization: The documentation does not describe any validation or filtering of user-supplied queries or external information retrieved during the research process.
Audit Metadata