Habilidades active-research

📦

active-research

Name: active-research
Author: actionbook

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red

Research Topics and Generate Evidence Reports

Broad research requests require many searches, source checks, and organized notes. This skill guides Actionbook browsing and turns findings into structured reports.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "active-research" from https://skillstore.io/skills/actionbook-active-research.md and its manifest at https://skillstore.io/api/skills/actionbook-active-research/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/actionbook-active-research.md Manifest firmado GET /api/skills/actionbook-active-research/manifest Lockfile firmado GET /api/skills/actionbook-active-research/lockfile

Pruébalo

Usando "active-research". Research the current Rust machine learning ecosystem.

Resultado esperado:

A sourced report covering major frameworks, inference options, benchmarks, adoption signals, limitations, and recent ecosystem developments.

Usando "active-research". Analyze arXiv paper 2501.00001 and related work.

Resultado esperado:

A paper report with metadata, research question, method, contributions, results, limitations, related papers, and source links.

Usando "active-research". Compare three vector databases for a regulated enterprise application.

Resultado esperado:

A decision report comparing deployment, security, filtering, performance evidence, operational costs, uncertainties, and verification needs.

Auditoría de seguridad

Riesgo alto

v2 • 15/8/2026 Abrir el informe versionado

Most static command findings are false positives caused by Markdown code formatting, and the listed public research URLs show no exfiltration. However, the skill gives high-risk anti-bot evasion guidance and lacks safe handling for shell-interpolated URLs, tokens, and unpinned package execution.

Archivos escaneados

795

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (4)

Alto

SKILL.md:27-31 SKILL.md:508-521

Anti-Bot Evasion Guidance

The skill directs agents to retry blocked sites with stealth mode and rotated browser fingerprints. This bypass guidance can enable unauthorized scraping and policy violations.

The file explicitly recommends stealth mode, fingerprint rotation, and rewritten URLs to avoid anti-bot blocking.

Alto

SKILL.md:48-59 SKILL.md:101-106

Untrusted URL Interpolation Into Shell Commands

The skill accepts direct URLs and repeatedly places a URL placeholder inside shell command strings. It provides no validation or shell-safe argument handling guidance.

The input may be any text or URL, and documented commands interpolate the URL in double quotes. Actual exploitability depends on how the agent constructs tool arguments.

Medio

SKILL.md:449-450

Unpinned Package Execution

A rendering fallback runs an unpinned package through npx. This may download and execute mutable registry content on the host.

The documented npx command names a package without an exact version or integrity control.

Medio

SKILL.md:27-29

Sensitive Token Handling Without Safeguards

The capability list recommends injecting JWTs or tokens for gated content without authorization, redaction, logging, or cleanup safeguards.

The skill explicitly advertises browser storage injection for JWTs and tokens, while no credential-handling controls are provided.

Elementos de revisión de capacidades (1)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Medio

SKILL.md:444

Shell command substitution

node "$(git rev-parse --show-toplevel)/packages/json-ui/dist/cli.js" render /absolute/path/to/report

The workflow uses shell substitution and then executes a repository-local JavaScript CLI. Fixed substitution input limits injection, but local repository content must be trusted.

Factores de riesgo

⚙️ Comandos externos (50)

🌐 Acceso a red (12)

SKILL.md:102 SKILL.md:126 SKILL.md:219 SKILL.md:226 SKILL.md:241 SKILL.md:286 SKILL.md:291 SKILL.md:370 SKILL.md:373 SKILL.md:376 SKILL.md:403 SKILL.md:763

Auditado por: codex Ver historial de auditorías →

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/actionbook-active-research/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/actionbook-active-research/security.svg)](https://skillstore.io/skills/actionbook-active-research?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/actionbook-active-research?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/actionbook-active-research/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/actionbook-active-research.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

actionbook. (2026). active-research security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/actionbook-active-research/audits/2

Cita BibTeX

@techreport{actionbook-actionbook-active-research-2026,
  author = {actionbook},
  title = {active-research security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/actionbook-active-research/audits/2},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "active-research security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
  - name: "actionbook"
date-released: "2026-08-15"
url: "https://skillstore.io/skills/actionbook-active-research/audits/2"
identifiers:
  - type: other
    value: "skillstore:actionbook-active-research:audit:2"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Compare Emerging Technologies

Collect current sources, compare technical approaches, and summarize tradeoffs for a product decision.

Review an Academic Paper

Analyze an arXiv paper, related work, methods, results, and cited resources in one report.

Map a Technical Ecosystem

Survey tools, frameworks, benchmarks, adoption signals, and recent developments across multiple source types.

Prueba estos prompts

Research a Topic

Research {topic}. Use at least four search angles and three reliable sources. Summarize key findings, disagreements, and source links.

Compare Alternatives

Compare {option A}, {option B}, and {option C} for {use case}. Evaluate capabilities, constraints, evidence quality, and practical tradeoffs.

Analyze a Paper

Analyze {arXiv ID or DOI}. Explain the research question, method, contributions, results, limitations, and relationship to recent work.

Build a Decision Report

Investigate {decision}. Prioritize sources from {date range}. Compare competing claims, assess evidence strength, identify unknowns, and recommend next research steps.

Mejores prácticas

Define the research question, decision context, date range, and required evidence before browsing.
Use several search angles and cross-check important claims across independent primary sources.
Review citations, sensitive details, and consequential conclusions before sharing the report.

Evitar

Do not treat search snippets as equivalent to verified full-source evidence.
Do not bypass access controls, CAPTCHAs, site policies, or authorization requirements.
Do not execute unpinned packages or repository scripts unless their source and integrity are trusted.

Preguntas frecuentes

What topics can this skill research?

It supports general topics, technologies, domains, direct URLs, arXiv papers, and DOI references.

Which browsing tool does it use?

The workflow requires Actionbook Browser commands for searching, navigation, extraction, and page inspection.

Does it produce an HTML report?

It writes json-ui report data and attempts HTML rendering when a trusted compatible renderer is available.

How many sources does it use?

The guidance targets at least three to five diverse sources and several search-query angles.

Can it access protected or private content?

Only use content that the user is authorized to access. Do not bypass access controls or site restrictions.

Are the findings guaranteed to be accurate?

No. Users should verify important claims, citations, dates, and interpretations against original sources.

Detalles del desarrollador

Autor

actionbook

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/actionbook/actionbook/tree/5a3eb05ec18fcebc09ef771008d6dda649295765/skills/active-research

Ref.

ba0224440a0286a68c9ef7d65e409a580b885eba

Actualidad del mantenimiento

16/8/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md