parallel-deep-research Audit report.

Warnings

• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• SKILL.md does not explicitly warn that the research topic is sent to an external API, so prompt-injected content in the topic could influence the external research output.
• The filename is meant to be derived from the topic, but there is no explicit guidance to sanitize it; unusual topic characters could lead to unintended output paths, even though the argument is quoted.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 73 GitHub stars
• Stars/forks activity: 73 stars, 7 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.