Fähigkeiten active-research
📦

active-research

Inhaltsrevision r1 Hohes Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff

Research Topics and Generate Evidence Reports

Broad research requests require many searches, source checks, and organized notes. This skill guides Actionbook browsing and turns findings into structured reports.

Unterstützt: Claude Codex Code(CC)
⚠️ 38 Schlecht

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "active-research" from https://skillstore.io/skills/actionbook-active-research.md and its manifest at https://skillstore.io/api/skills/actionbook-active-research/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/actionbook-active-research.md Signiertes manifest GET /api/skills/actionbook-active-research/manifest Signiertes lockfile GET /api/skills/actionbook-active-research/lockfile

Testen

„active-research“ wird verwendet. Research the current Rust machine learning ecosystem.

Erwartetes Ergebnis:

A sourced report covering major frameworks, inference options, benchmarks, adoption signals, limitations, and recent ecosystem developments.

„active-research“ wird verwendet. Analyze arXiv paper 2501.00001 and related work.

Erwartetes Ergebnis:

A paper report with metadata, research question, method, contributions, results, limitations, related papers, and source links.

„active-research“ wird verwendet. Compare three vector databases for a regulated enterprise application.

Erwartetes Ergebnis:

A decision report comparing deployment, security, filtering, performance evidence, operational costs, uncertainties, and verification needs.

Sicherheitsaudit

Hohes Risiko
v2 • 15.8.2026 Versionsbericht öffnen

Most static command findings are false positives caused by Markdown code formatting, and the listed public research URLs show no exfiltration. However, the skill gives high-risk anti-bot evasion guidance and lacks safe handling for shell-interpolated URLs, tokens, and unpinned package execution.

1
Gescannte Dateien
795
Analysierte Zeilen
1
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (4)

Hoch
SKILL.md:27-31SKILL.md:508-521
Anti-Bot Evasion Guidance
The skill directs agents to retry blocked sites with stealth mode and rotated browser fingerprints. This bypass guidance can enable unauthorized scraping and policy violations.
The file explicitly recommends stealth mode, fingerprint rotation, and rewritten URLs to avoid anti-bot blocking.
Hoch
SKILL.md:48-59SKILL.md:101-106
Untrusted URL Interpolation Into Shell Commands
The skill accepts direct URLs and repeatedly places a URL placeholder inside shell command strings. It provides no validation or shell-safe argument handling guidance.
The input may be any text or URL, and documented commands interpolate the URL in double quotes. Actual exploitability depends on how the agent constructs tool arguments.
Mittel
SKILL.md:449-450
Unpinned Package Execution
A rendering fallback runs an unpinned package through npx. This may download and execute mutable registry content on the host.
The documented npx command names a package without an exact version or integrity control.
Mittel
SKILL.md:27-29
Sensitive Token Handling Without Safeguards
The capability list recommends injecting JWTs or tokens for gated content without authorization, redaction, logging, or cleanup safeguards.
The skill explicitly advertises browser storage injection for JWTs and tokens, while no credential-handling controls are provided.
Elemente der Fähigkeitsprüfung (1)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Mittel
SKILL.md:444
Shell command substitution
node "$(git rev-parse --show-toplevel)/packages/json-ui/dist/cli.js" render /absolute/path/to/report
The workflow uses shell substitution and then executes a repository-local JavaScript CLI. Fixed substitution input limits injection, but local repository content must be trusted.

Risikofaktoren

⚙️ Externe Befehle (50)
SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:37-40 SKILL.md:40-48 SKILL.md:48-49 SKILL.md:49 SKILL.md:55-56 SKILL.md:56-63 SKILL.md:63-83 SKILL.md:83-87 SKILL.md:87-89 SKILL.md:89 SKILL.md:90-92 SKILL.md:92 SKILL.md:94-95 SKILL.md:95 SKILL.md:101-107 SKILL.md:107-111 SKILL.md:111-112 SKILL.md:112-113 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115 SKILL.md:116-117 SKILL.md:117-119 SKILL.md:119-120 SKILL.md:120-122 SKILL.md:122-128 SKILL.md:128-135 SKILL.md:135-139 SKILL.md:139-150 SKILL.md:150-152 SKILL.md:152-154 SKILL.md:154-155 SKILL.md:155-158
🌐 Netzwerkzugriff (12)
SKILL.md:102 SKILL.md:126 SKILL.md:219 SKILL.md:226 SKILL.md:241 SKILL.md:286 SKILL.md:291 SKILL.md:370 SKILL.md:373 SKILL.md:376 SKILL.md:403 SKILL.md:763
Geprüft von: codex Audit-Verlauf anzeigen →
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/actionbook-active-research/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/actionbook-active-research/security.svg)](https://skillstore.io/skills/actionbook-active-research?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/actionbook-active-research?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/actionbook-active-research/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/actionbook-active-research.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

actionbook. (2026). active-research security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/actionbook-active-research/audits/2

BibTeX-Zitat

@techreport{actionbook-actionbook-active-research-2026, author = {actionbook}, title = {active-research security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/actionbook-active-research/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "active-research security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "actionbook" date-released: "2026-08-15" url: "https://skillstore.io/skills/actionbook-active-research/audits/2" identifiers: - type: other value: "skillstore:actionbook-active-research:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
55
Architektur
85
Wartbarkeit
87
Inhalt
65
Gemeinschaft
74
Spezifikationskonformität

Was Sie erstellen können

Compare Emerging Technologies

Collect current sources, compare technical approaches, and summarize tradeoffs for a product decision.

Review an Academic Paper

Analyze an arXiv paper, related work, methods, results, and cited resources in one report.

Map a Technical Ecosystem

Survey tools, frameworks, benchmarks, adoption signals, and recent developments across multiple source types.

Diese Prompts ausprobieren

Research a Topic 
Research {topic}. Use at least four search angles and three reliable sources. Summarize key findings, disagreements, and source links.
Compare Alternatives 
Compare {option A}, {option B}, and {option C} for {use case}. Evaluate capabilities, constraints, evidence quality, and practical tradeoffs.
Analyze a Paper 
Analyze {arXiv ID or DOI}. Explain the research question, method, contributions, results, limitations, and relationship to recent work.
Build a Decision Report 
Investigate {decision}. Prioritize sources from {date range}. Compare competing claims, assess evidence strength, identify unknowns, and recommend next research steps.

Bewährte Praktiken

  • Define the research question, decision context, date range, and required evidence before browsing.
  • Use several search angles and cross-check important claims across independent primary sources.
  • Review citations, sensitive details, and consequential conclusions before sharing the report.

Vermeiden

  • Do not treat search snippets as equivalent to verified full-source evidence.
  • Do not bypass access controls, CAPTCHAs, site policies, or authorization requirements.
  • Do not execute unpinned packages or repository scripts unless their source and integrity are trusted.

Häufig gestellte Fragen

What topics can this skill research?
It supports general topics, technologies, domains, direct URLs, arXiv papers, and DOI references.
Which browsing tool does it use?
The workflow requires Actionbook Browser commands for searching, navigation, extraction, and page inspection.
Does it produce an HTML report?
It writes json-ui report data and attempts HTML rendering when a trusted compatible renderer is available.
How many sources does it use?
The guidance targets at least three to five diverse sources and several search-query angles.
Can it access protected or private content?
Only use content that the user is authorized to access. Do not bypass access controls or site restrictions.
Are the findings guaranteed to be accurate?
No. Users should verify important claims, citations, dates, and interpretations against original sources.

Entwicklerdetails

Lizenz

MIT

Skillstore-Revision

r1

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/actionbook/actionbook/tree/5a3eb05ec18fcebc09ef771008d6dda649295765/skills/active-research

Ref.

ba0224440a0286a68c9ef7d65e409a580b885eba

Aktualität der Wartung

16.8.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📄 SKILL.md

Mehr von actionbook

Alle anzeigen

Ähnliche Skills

Alle anzeigen