Deep Research with MCP

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent web-research skill, with disclosed use of external MCP search tools, local curl/python commands, report file writes, and optional sub-agent delegation.

Before installing, verify that you trust the MCP search providers and local tools it relies on. Avoid using it for confidential research unless your MCP setup is approved for that data, and use the optional sub-agent workflow only when you intend delegated research.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may not work as expected unless those tools and MCP servers are installed and trusted.

Why it was flagged

The skill depends on local binaries and preconfigured MCP search servers. This is consistent with the research purpose, but users should verify those external components, especially because the registry metadata did not declare required binaries.

Skill content
requires: bins: ["mcporter", "curl", "python3"] ... mcp_requirements: ... "MiniMax.web_search" ... "web-search-prime.web_search_prime"
Recommendation

Confirm the MCP servers, mcporter, curl, and python3 are installed from trusted sources before using the skill.

What this means

The agent will make external search and web requests while researching.

Why it was flagged

The workflow instructs the agent to call MCP tools and use local commands to fetch and process web pages. These commands are central to the research function and are not hidden.

Skill content
mcporter call MiniMax.web_search query:"<sub-question>" ... curl -sL "<url>" | python3 -c
Recommendation

Use the skill for topics you are comfortable sending to configured search providers, and review generated reports and saved files.

What this means

Research topics and possibly user-provided context may be visible to the configured MCP search provider.

Why it was flagged

Research queries are routed through configured MCP search servers. This is expected for the skill, but the privacy and identity boundaries depend on those external MCP providers.

Skill content
Uses MCP-configured search tools (minimax web_search or zai-mcp-server web_search_prime).
Recommendation

Check the privacy and access policies of the MCP search tools before using the skill for confidential research.

What this means

If used, a separate agent session may perform the searches and write the report before returning results.

Why it was flagged

The skill documents optional delegation to a spawned sub-agent. The delegation is disclosed and scoped to the research task, but users should be aware of it.

Skill content
For Sub-Agent Usage ... sessions_spawn( task: "Run deep research on [TOPIC]... Save report... wake the main session", label: "research-[slug]", model: "opus" )
Recommendation

Only use the sub-agent workflow when you intentionally want delegated or background research, and confirm the output path.