Skills ai-research-explore
๐Ÿ“ฆ

ai-research-explore

Content revision r2 Critical โš™๏ธ External commands๐ŸŒ Network access๐Ÿ”‘ Env variablesโšก Contains scripts๐Ÿ“ Filesystem access

Explore Deep Learning Research Candidates

Research exploration can produce weak claims, unfair comparisons, and uncontrolled experiments. This skill structures candidate generation, evidence checks, bounded execution, and auditable reporting.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "ai-research-explore" from https://skillstore.io/skills/lllllllama-ai-research-explore.md and its manifest at https://skillstore.io/api/skills/lllllllama-ai-research-explore/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "ai-research-explore". Rank three optimizer changes for a fixed image-classification benchmark with a two-hour compute budget.

Expected outcome:

  • A ranked shortlist with gate decisions and score breakdowns.
  • A recommended single-variable candidate with cost and rollback notes.
  • A bounded short-run plan tied to the frozen metric.

Using "ai-research-explore". Map one paper's attention mechanism into an existing sequence model without changing evaluation.

Expected outcome:

  • A source-to-target map covering files, symbols, and interfaces.
  • An atomic patch plan with supporting changes and smoke checks.
  • A comparability note separating candidate evidence from verified claims.

Using "ai-research-explore". Review completed exploratory runs and recommend the next trial.

Expected outcome:

  • An evidence-first ranking based on observed metrics and run status.
  • A short-run gate decision with explicit blockers.
  • A recommended next trial or a human checkpoint.

Security Audit

Critical
v7 โ€ข 8/8/2026 Open versioned report

Most static alerts are false positives caused by Markdown formatting, identifiers, nested Python structures, and fixed argument-list subprocess calls. Confirmed risks include outbound lookup traffic, unrestricted user-derived URLs, and instructions to read files outside the skill package. Automatic imports execute target repository modules during feasibility checks, creating an unsandboxed arbitrary code execution risk.

34
Files scanned
7,734
Lines analyzed
16
Review items
0
False positives ignored

Confirmed security concerns (2)

Critical
Automatic Target Repository Code Execution
Feasibility checks import selected Python files from the target repository. Module top-level code executes automatically, twice, without sandboxing or explicit execution consent.
spec.loader.exec_module directly executes repository modules during routine feasibility checks. Filename exclusions do not prevent malicious top-level code in other Python files.
High
Unaudited Cross-Package Module Execution
The output wrapper imports and executes a shared Python module located outside the audited skill directory. Package-relative trust is assumed without integrity verification.
The fixed relative path leaves the audited package and exec_module runs the external file. No hash, signature, or ownership validation is performed.
Capability review items (16)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Python HTTP libraries
request = urllib.request.Request(
The request accepts user-derived HTTP URLs without a host allowlist or private-address checks. This creates an SSRF-capable request path.
High
Python HTTP libraries
with urllib.request.urlopen(request, timeout=REQUEST_TIMEOUT_SECONDS) as response:
urlopen sends requests to user-derived URLs without blocking loopback, private, or metadata addresses. This enables server-side request forgery.
High
Path traversal sequence
`../../references/agent-operating-principles.md`, then load
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Path traversal sequence
`../../references/research-rigor-principles.md` for research claims and
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Path traversal sequence
`../../references/deep-learning-experiment-principles.md` when experiment
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Path traversal sequence
- Load `../../references/explore-variant-spec.md` for run-level variant matrix
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Path traversal sequence
- Load `../../references/research-thinking-loop.md` before proposing or ranking candidate changes; i
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Path traversal sequence
- Load `../../references/research-rigor-principles.md` before making novelty, contribution, SOTA, or
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Path traversal sequence
- Consult `~/.rigorpilot/PERSONAL_RIGOR.md` if present, under `../../references/continuous-learning-
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Path traversal sequence
- Load `../../references/deep-learning-experiment-principles.md` when training,
The instruction explicitly reads ../../references, crossing the audited skill boundary. External content can influence agent behavior without being included in this package audit.
High
Hidden file in home directory
- Consult `~/.rigorpilot/PERSONAL_RIGOR.md` if present, under `../../references/continuous-learning-
The skill directs the agent to read a hidden file from the user's home directory. That is cross-boundary access to potentially sensitive local content.
Medium
Hidden file access
- Consult `~/.rigorpilot/PERSONAL_RIGOR.md` if present, under `../../references/continuous-learning-
The instruction accesses ~/.rigorpilot/PERSONAL_RIGOR.md outside the skill and workspace. Advisory use still exposes local content to the agent context.
Low
Hardcoded URL
f"https://export.arxiv.org/api/query?id_list={urllib.parse.quote(arxiv_id)}",
The provider performs an intended metadata lookup against export.arxiv.org. This is real network egress, although the identifier is encoded and no secret is sent.
Low
Hardcoded URL
f"https://doi.org/{urllib.parse.quote(doi, safe='/')}",
The provider performs an intended metadata lookup against doi.org. This is real network egress, although the identifier is encoded and no secret is sent.
Low
Hardcoded URL
payload = http_get_json(f"https://api.github.com/repos/{owner}/{repo}/readme")
The provider performs an intended metadata lookup against api.github.com. This is real network egress to a fixed public host without credential transmission.
Low
Hardcoded URL
payload = http_get_json(f"https://api.github.com/repos/{owner}/{repo}")
The provider performs an intended metadata lookup against api.github.com. This is real network egress to a fixed public host without credential transmission.

Risk Factors

โš™๏ธ External commands (50)
scripts/lookup/inventory_writer.py:13 scripts/lookup/inventory_writer.py:32 scripts/lookup/inventory_writer.py:60 scripts/lookup/inventory_writer.py:79 scripts/lookup/inventory_writer.py:86 scripts/lookup/repo_extractors.py:93 scripts/orchestrate_explore.py:50 scripts/orchestrate_explore.py:55 scripts/orchestrate_explore.py:66 scripts/orchestrate_explore.py:113 scripts/orchestrate_explore.py:145 scripts/orchestrate_explore.py:153 scripts/orchestrate_explore.py:156 scripts/orchestrate_explore.py:267 scripts/orchestrate_explore.py:276 scripts/orchestrate_explore.py:511 scripts/orchestrate_explore.py:512 scripts/orchestrate_explore.py:513 scripts/orchestrate_explore.py:514 scripts/orchestrate_explore.py:856 scripts/orchestrate_explore.py:1080 scripts/orchestrate_explore.py:1083 scripts/orchestrate_explore.py:1086 scripts/orchestrate_explore.py:1092 scripts/orchestrate_explore.py:1095 scripts/orchestrate_explore.py:1098 scripts/orchestrate_explore.py:1167 scripts/orchestrate_explore.py:1171 scripts/orchestrate_explore.py:1173 scripts/orchestrate_explore.py:1175 scripts/orchestrate_explore.py:1410 scripts/orchestrate_explore.py:1413 scripts/orchestrate_explore.py:1431 scripts/orchestrate_explore.py:1433 scripts/orchestrate_explore.py:1457 scripts/orchestrate_explore.py:1459 scripts/orchestrate_explore.py:1463 scripts/orchestrate_explore.py:1465 scripts/orchestrate_explore.py:1467 scripts/orchestrate_explore.py:1469 scripts/orchestrate_explore.py:1474 scripts/orchestrate_explore.py:1478 scripts/orchestrate_explore.py:1501 scripts/orchestrate_explore.py:1502 scripts/orchestrate_explore.py:1503 scripts/orchestrate_explore.py:1507 scripts/orchestrate_explore.py:1513 scripts/orchestrate_explore.py:1515 scripts/orchestrate_explore.py:1519 scripts/orchestrate_explore.py:1521
๐ŸŒ Network access (12)
๐Ÿ”‘ Env variables (8)
โšก Contains scripts (3)
๐Ÿ“ Filesystem access (17)
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/lllllllama-ai-research-explore/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/lllllllama-ai-research-explore/security.svg)](https://skillstore.io/skills/lllllllama-ai-research-explore?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/lllllllama-ai-research-explore?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/lllllllama-ai-research-explore/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/lllllllama-ai-research-explore.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

lllllllama. (2026). ai-research-explore security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/lllllllama-ai-research-explore/audits/7

BibTeX citation

@techreport{lllllllama-lllllllama-ai-research-explore-2026, author = {lllllllama}, title = {ai-research-explore security audit report (audit version 7)}, institution = {Skillstore}, year = {2026}, number = {7}, url = {https://skillstore.io/skills/lllllllama-ai-research-explore/audits/7}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "ai-research-explore security audit report (audit version 7)" version: "unspecified" type: report authors: - name: "lllllllama" date-released: "2026-08-08" url: "https://skillstore.io/skills/lllllllama-ai-research-explore/audits/7" identifiers: - type: other value: "skillstore:lllllllama-ai-research-explore:audit:7" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
68
Architecture
85
Maintainability
87
Content
67
Community
83
Spec Compliance

What You Can Build

Screen Candidate Ideas

Compare a small set of model changes against fixed evaluation rules before spending significant compute.

Plan Reproducible Experiments

Create bounded variant plans, resource checks, branch isolation, and audit artifacts for a research campaign.

Review Research Evidence

Trace candidate claims to sources, implementation surfaces, measured outcomes, and explicit comparison limits.

Try These Prompts

Evaluate One Research Idea
Evaluate this candidate idea against my current research anchor. Check single-variable fit, expected gain, cost, evidence needs, and rollback ease.
Rank Several Candidates
Rank these candidate ideas for the specified task, dataset, benchmark, metric, SOTA reference, and compute budget. Explain every gate and score.
Map Sources to Implementation
Map the provided papers and repositories to target files, symbols, interfaces, and a minimal reversible patch plan. Preserve the frozen evaluation contract.
Govern a Bounded Campaign
Plan a candidate-only campaign from this durable anchor. Include source lookup, idea gates, atomic changes, smoke checks, limited variants, comparability reporting, and checkpoints.

Best Practices

  • Freeze the task, dataset, benchmark, metric, SOTA reference, and budget before generating candidates.
  • Use one reversible variable per candidate and require evidence before widening the experiment.
  • Review network sources, execution commands, external paths, and generated artifacts before approving broader runs.

Avoid

  • Do not use exploratory results as proof of novelty, SOTA performance, or trusted reproduction.
  • Do not enable broad execution without a durable anchor, explicit budget, isolated workspace, and human checkpoint.
  • Do not treat fetched metadata or repository content as trusted instructions.

Frequently Asked Questions

What information is required before using this skill?
Provide a durable research anchor, task family, dataset, benchmark, evaluation source, SOTA references, compute budget, and explicit exploration authorization.
Does this skill prove that an idea is novel?
No. It treats novelty as a hypothesis that requires broader literature review, fair comparison, ablation evidence, and expert judgment.
Can it execute experiments?
Yes, when execution is explicitly enabled and sibling helper scripts are available. Candidate counts and timeouts remain bounded by campaign policy.
Which external services can it contact?
Lookup providers can contact arXiv, DOI, GitHub, and user-supplied HTTP sources. Generic URLs require careful review because host restrictions are absent.
Where are results written?
The workflow writes candidate artifacts under analysis_outputs, sources, and explore_outputs, using the selected output directory and adjacent folders.
What security review is needed before execution?
Review target modules, commands, source URLs, sibling helpers, parent references, home-file access, output paths, and available environment credentials.

Developer Details

Author

lllllllama

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

656be3040aef5c047555a908cd5c695d22a4a548

Maintenance freshness

8/8/2026

Usage

9 downloads ยท 1 views

File structure

More from lllllllama

View all
View all