Skills active-research

📦

active-research

Name: active-research
Author: actionbook

Content revision r1 High Risk ⚙️ External commands🌐 Network access

Research Topics and Generate Evidence Reports

Broad research requests require many searches, source checks, and organized notes. This skill guides Actionbook browsing and turns findings into structured reports.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "active-research" from https://skillstore.io/skills/actionbook-active-research.md and its manifest at https://skillstore.io/api/skills/actionbook-active-research/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/actionbook-active-research.md Signed manifest GET /api/skills/actionbook-active-research/manifest Signed lockfile GET /api/skills/actionbook-active-research/lockfile

Test it

Using "active-research". Research the current Rust machine learning ecosystem.

Expected outcome:

A sourced report covering major frameworks, inference options, benchmarks, adoption signals, limitations, and recent ecosystem developments.

Using "active-research". Analyze arXiv paper 2501.00001 and related work.

Expected outcome:

A paper report with metadata, research question, method, contributions, results, limitations, related papers, and source links.

Using "active-research". Compare three vector databases for a regulated enterprise application.

Expected outcome:

A decision report comparing deployment, security, filtering, performance evidence, operational costs, uncertainties, and verification needs.

Security Audit

High Risk

v2 • 8/15/2026 Open versioned report

Most static command findings are false positives caused by Markdown code formatting, and the listed public research URLs show no exfiltration. However, the skill gives high-risk anti-bot evasion guidance and lacks safe handling for shell-interpolated URLs, tokens, and unpinned package execution.

Files scanned

795

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (4)

High

SKILL.md:27-31 SKILL.md:508-521

Anti-Bot Evasion Guidance

The skill directs agents to retry blocked sites with stealth mode and rotated browser fingerprints. This bypass guidance can enable unauthorized scraping and policy violations.

The file explicitly recommends stealth mode, fingerprint rotation, and rewritten URLs to avoid anti-bot blocking.

High

SKILL.md:48-59 SKILL.md:101-106

Untrusted URL Interpolation Into Shell Commands

The skill accepts direct URLs and repeatedly places a URL placeholder inside shell command strings. It provides no validation or shell-safe argument handling guidance.

The input may be any text or URL, and documented commands interpolate the URL in double quotes. Actual exploitability depends on how the agent constructs tool arguments.

Medium

SKILL.md:449-450

Unpinned Package Execution

A rendering fallback runs an unpinned package through npx. This may download and execute mutable registry content on the host.

The documented npx command names a package without an exact version or integrity control.

Medium

SKILL.md:27-29

Sensitive Token Handling Without Safeguards

The capability list recommends injecting JWTs or tokens for gated content without authorization, redaction, logging, or cleanup safeguards.

The skill explicitly advertises browser storage injection for JWTs and tokens, while no credential-handling controls are provided.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:444

Shell command substitution

node "$(git rev-parse --show-toplevel)/packages/json-ui/dist/cli.js" render /absolute/path/to/report

The workflow uses shell substitution and then executes a repository-local JavaScript CLI. Fixed substitution input limits injection, but local repository content must be trusted.

Risk Factors

⚙️ External commands (50)

🌐 Network access (12)

SKILL.md:102 SKILL.md:126 SKILL.md:219 SKILL.md:226 SKILL.md:241 SKILL.md:286 SKILL.md:291 SKILL.md:370 SKILL.md:373 SKILL.md:376 SKILL.md:403 SKILL.md:763

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/actionbook-active-research/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/actionbook-active-research/security.svg)](https://skillstore.io/skills/actionbook-active-research?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/actionbook-active-research?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/actionbook-active-research/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/actionbook-active-research.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

actionbook. (2026). active-research security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/actionbook-active-research/audits/2

BibTeX citation

@techreport{actionbook-actionbook-active-research-2026,
  author = {actionbook},
  title = {active-research security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/actionbook-active-research/audits/2},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "active-research security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
  - name: "actionbook"
date-released: "2026-08-15"
url: "https://skillstore.io/skills/actionbook-active-research/audits/2"
identifiers:
  - type: other
    value: "skillstore:actionbook-active-research:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Compare Emerging Technologies

Collect current sources, compare technical approaches, and summarize tradeoffs for a product decision.

Review an Academic Paper

Analyze an arXiv paper, related work, methods, results, and cited resources in one report.

Map a Technical Ecosystem

Survey tools, frameworks, benchmarks, adoption signals, and recent developments across multiple source types.

Try These Prompts

Research a Topic

Research {topic}. Use at least four search angles and three reliable sources. Summarize key findings, disagreements, and source links.

Compare Alternatives

Compare {option A}, {option B}, and {option C} for {use case}. Evaluate capabilities, constraints, evidence quality, and practical tradeoffs.

Analyze a Paper

Analyze {arXiv ID or DOI}. Explain the research question, method, contributions, results, limitations, and relationship to recent work.

Build a Decision Report

Investigate {decision}. Prioritize sources from {date range}. Compare competing claims, assess evidence strength, identify unknowns, and recommend next research steps.

Best Practices

Define the research question, decision context, date range, and required evidence before browsing.
Use several search angles and cross-check important claims across independent primary sources.
Review citations, sensitive details, and consequential conclusions before sharing the report.

Avoid

Do not treat search snippets as equivalent to verified full-source evidence.
Do not bypass access controls, CAPTCHAs, site policies, or authorization requirements.
Do not execute unpinned packages or repository scripts unless their source and integrity are trusted.

Frequently Asked Questions

What topics can this skill research?

It supports general topics, technologies, domains, direct URLs, arXiv papers, and DOI references.

Which browsing tool does it use?

The workflow requires Actionbook Browser commands for searching, navigation, extraction, and page inspection.

Does it produce an HTML report?

It writes json-ui report data and attempts HTML rendering when a trusted compatible renderer is available.

How many sources does it use?

The guidance targets at least three to five diverse sources and several search-query angles.

Can it access protected or private content?

Only use content that the user is authorized to access. Do not bypass access controls or site restrictions.

Are the findings guaranteed to be accurate?

No. Users should verify important claims, citations, dates, and interpretations against original sources.

Developer Details

Author

actionbook

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/actionbook/actionbook/tree/5a3eb05ec18fcebc09ef771008d6dda649295765/skills/active-research

Ref

ba0224440a0286a68c9ef7d65e409a580b885eba

Maintenance freshness

8/16/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md