deep-research
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to explore the local environment and analyze project metadata.
- Searches for projects and specific architectural files using
ls ~/Documents/ | grep -i "KEYWORD"andfind ~/Documents -maxdepth 2 -name "CLAUDE.md" -exec grep -l "KEYWORD" {} \;. - Identifies reusable components and schemas using
find ~/Documents -maxdepth 3 -name "schema.ts" -o -name "ARCHITECTURE.md" | head -20. - Searches within specific project directories such as
~/Documents/basalt-cortex/using grep. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of ingesting untrusted content from the web.
- Ingestion points: Processes data from Reddit, Hacker News, GitHub issues, product review sites (G2, Capterra), and forum discussions.
- Boundary markers: The instructions do not define clear delimiters or "ignore embedded instructions" warnings for the external content being processed.
- Capability inventory: The agent has the ability to read local files, write research artifacts to the filesystem, and execute shell search commands.
- Sanitization: There are no explicit instructions to sanitize or filter external content before it is interpolated into the agent's context.
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch information from well-known cloud service providers.
- Fetches changelogs and documentation from official domains including Cloudflare, Vercel, Firebase, and Supabase to identify current platform capabilities.
Audit Metadata