deep-research

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to explore the local environment and analyze project metadata.
  • Searches for projects and specific architectural files using ls ~/Documents/ | grep -i "KEYWORD" and find ~/Documents -maxdepth 2 -name "CLAUDE.md" -exec grep -l "KEYWORD" {} \;.
  • Identifies reusable components and schemas using find ~/Documents -maxdepth 3 -name "schema.ts" -o -name "ARCHITECTURE.md" | head -20.
  • Searches within specific project directories such as ~/Documents/basalt-cortex/ using grep.
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of ingesting untrusted content from the web.
  • Ingestion points: Processes data from Reddit, Hacker News, GitHub issues, product review sites (G2, Capterra), and forum discussions.
  • Boundary markers: The instructions do not define clear delimiters or "ignore embedded instructions" warnings for the external content being processed.
  • Capability inventory: The agent has the ability to read local files, write research artifacts to the filesystem, and execute shell search commands.
  • Sanitization: There are no explicit instructions to sanitize or filter external content before it is interpolated into the agent's context.
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch information from well-known cloud service providers.
  • Fetches changelogs and documentation from official domains including Cloudflare, Vercel, Firebase, and Supabase to identify current platform capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:26 AM
Security Audit — agent-trust-hub — deep-research