unifuncs-deep-research
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
deep-research-report.pyutilizessubprocess.Popento initiate a background worker. This worker is a self-invocation of the script designed to continue receiving streaming data from the API during long research tasks (typically 3-10 minutes). This ensures data integrity even if the primary execution environment encounters a timeout. The command is constructed using a list of arguments, which prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The scripts communicate with the vendor's API at
https://api.unifuncs.comto submit research queries and download the resulting reports. This is the intended functional purpose of the skill. - [SAFE]: API credentials are managed securely through the
UNIFUNCS_API_KEYenvironment variable, avoiding hardcoded secrets. Additionally, the skill's instructions include a mandatory confirmation protocol to ensure user oversight for long-running and potentially high-cost tasks.
Audit Metadata