unifuncs-deep-research
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
deep-research-report.pyutilizessubprocess.Popento manage long-running research sessions by launching a background worker. This is implemented by self-invoking the current script with a structured list of arguments and does not use a shell, which prevents command injection and follows standard patterns for managing background tasks in CLI tools. - [EXTERNAL_DOWNLOADS]: The Python scripts interact exclusively with the author's official API domain (
api.unifuncs.com) to submit research queries and fetch generated content. These network operations are necessary for the skill's primary function and are documented clearly in the skill's instructions. - [SAFE]: The skill instructions emphasize security and cost-awareness by requiring the agent to obtain explicit user confirmation before execution and by utilizing environment variables for secret management instead of hardcoded credentials.
Audit Metadata