Deep Researcher

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the setup as written could update or alter other installed skills, potentially changing agent behavior outside this research skill.

Why it was flagged

The skill transparently depends on upstream skills, but the setup uses latest/unpinned installs and a broad `update --all` command that can change the user's wider skill environment, not just this skill's dependencies.

Skill content
npx -y clawhub@latest install deepresearchwork
npx -y clawhub@latest install tavily-search
npx -y clawhub@latest install literature-search
npx -y clawhub@latest install perplexity-deep-search
npx -y clawhub@latest update --all
Recommendation

Install only the named dependencies, review upstream skills before use, and avoid `update --all` unless you intentionally want to update every installed skill.

What this means

The agent will be able to use the user's Tavily and Perplexity accounts within the limits of those API keys.

Why it was flagged

The skill requires external provider API keys and checks that they are present. This is expected for the stated integrations, and the visible preflight only counts characters rather than printing the keys.

Skill content
Required Credentials

- `TAVILY_API_KEY`
- `PERPLEXITY_API_KEY`

Preflight:

echo "$TAVILY_API_KEY" | wc -c
echo "$PERPLEXITY_API_KEY" | wc -c
Recommendation

Use least-privilege or dedicated API keys where possible, monitor provider usage, and revoke keys if you no longer use the skill.

What this means

Sensitive or confidential research questions could be transmitted to third-party services during normal use.

Why it was flagged

The skill is designed to send research queries and validation prompts through external search/research providers. This is purpose-aligned, but it means user research topics may leave the local environment.

Skill content
tavily-search

Use for web evidence retrieval... perplexity-deep-search

Use as contradiction arbiter and targeted fact checker
Recommendation

Do not include confidential, regulated, or proprietary information in research prompts unless those provider terms and account settings are acceptable.