research
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from web searches and user pastes, creating an indirect prompt injection surface.
- Ingestion points: Web search results and fetched page content are processed by subagents, and users can provide research documents directly.
- Boundary markers: The skill defines a structured output format and citation rules for data returned by subagents.
- Capability inventory: The skill utilizes file read/write operations, shell commands (sed, mkdir), and subagent spawning.
- Sanitization: A mandatory "Review before storing" step is implemented, requiring the main agent to validate information before saving it to the filesystem.
- [COMMAND_EXECUTION]: The skill uses shell commands to manage its project-scoped data storage.
- Evidence: Instructions involve
sedfor targeted content extraction from findings,mkdirfor directory structure creation, andgit rev-parsefor resolving the project root. - Context: These commands are used for the intended purpose of maintaining the research store and operate within the project's local environment.
Audit Metadata