Simple Claude Deep Research Agent

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is mostly a coherent web-research skill, but it includes instructions to use browser automation against login/paywall pages and ships a broad file-edit permission.

Before installing, make sure you are comfortable with autonomous web research, parallel subagents, and optional browser rendering. Remove or scope the Edit permission, and change the Playwright instructions so the agent does not attempt to bypass paywalls or login walls. Do not include confidential data in research prompts unless you accept that it may be passed to subagents.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may try to access or render content that a website intended to restrict, potentially violating access rules or user expectations.

Why it was flagged

The subagent is told to automatically use browser automation when login walls or paywalls might be bypassed, which is not clearly authorized by the research purpose.

Skill content
"Login walls or paywalls that might be bypassed by rendering" ... "If any of these occur, IMMEDIATELY use Playwright MCP"
Recommendation

Remove the paywall/login-bypass language and require explicit user authorization; instruct the agent to respect paywalls, login requirements, robots policies, and site terms.

What this means

If these settings are honored, the agent could modify local project files while performing research, not just return a report in chat.

Why it was flagged

The local Claude settings grant Edit permission without a visible path or file-type restriction, even though the research workflow mainly needs web access and report generation.

Skill content
"allow": ["Bash(dir /a C:UsersGZDesktopsimple_deep_research)", "Skill(deep-research)", "WebSearch", "Edit"]
Recommendation

Remove broad Edit permission or restrict it to a dedicated output directory such as research_outputs/, with confirmation before overwriting files.

What this means

Sensitive details included in a research request could be shared across multiple agent contexts during the task.

Why it was flagged

The skill intentionally delegates research prompts and context to multiple general-purpose subagents, which is purpose-aligned but means user-provided details may be copied into subagent prompts.

Skill content
Use the `Task` tool to launch research subagents with the `general-purpose` subagent_type ... Deploy multiple subagents SIMULTANEOUSLY
Recommendation

Avoid putting private credentials, confidential documents, or sensitive personal data into research prompts; keep subagent prompts narrowly scoped.

What this means

It is harder to independently verify the skill’s origin, maintenance status, or intended distribution channel.

Why it was flagged

The package provenance is limited, so users have less context for who maintains it or where to verify updates.

Skill content
Source: unknown; Homepage: none
Recommendation

Install only if you trust the publisher; prefer a repository or homepage with review history and pin any external MCP dependencies you choose to add.