Agent skill · Audited from source
surprise-me
skill · bytedance/deer-flowMIT licenceAudited 31 Oct 2026 · source 0290becc72cc
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 0290becc72cc and found no filesystem, network or shell access and no hard-coded secrets. What it does: Create a delightful, unexpected "wow" experience for the user by dynamically discovering and creatively combining other enabled skills. Triggers when the user says "surprise me" or any request expressing a desire for an…
Cite
Cite this page
ModelsAtlas. “surprise-me (bytedance/deer-flow)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/bytedance/surprise-me
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 0290becc72cc · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherbytedance GitHub organizationOwner of the repository this skill is read from
- Source folderbytedance/deer-flow/skills/public/surprise-meThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict0290becc72ccA new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Create a delightful, unexpected "wow" experience for the user by dynamically discovering and creatively combining other enabled skills. Triggers when the user says "surprise me" or any request expressing a desire for an…
--- name: surprise-me description: Create a delightful, unexpected "wow" experience for the user by dynamically discovering and creatively combining other enabled skills. Triggers when the user says "surprise me" or any request expressing a desire for an unexpected creative showcase. Also triggers when the user is bored, wants inspiration, or asks for "something interesting". --- # Surprise Me Deliver an unexpected, delightful experience by dynamically discovering available skills and combining them creatively. ## Workflow ### Step 1: Discover Available Skills Read all the skills listed in the <available_skills>. ### Step 2: Plan the Surprise Select **1 to 3** skills and design a creative mashup. The goal is a single cohesive deliverable, not separate demos. **Creative combination principles:** - Juxtapose skills in unexpected ways (e.g., a presentation about algorithmic art, a research report turned into a slide deck, a styled doc with canvas-designed illustrations) - Incorporate the user's known interests/context from memory if available - Prioritize visual impact and emotional delight over information density - The output should feel like a gift — polished, surprising, and fun **Theme ideas (pick or remix):** - Something tied to today's date, season, or trending news - A mini creative project the user never asked for but would love - A playful "what if" concept - An aesthetic artifact combining data + design - A fun interactive HTML/React experience ### Step 3: Fallback — No Other Skills Available If no other skills are discovered (only surprise-me exists), use one of these fallbacks: 1. **News-based surprise**: Search today's news for a fascinating story, then create a beautifully designed HTML artifact presenting it in a visually striking way 2. **Interactive HTML experience**: Build a creative single-page web experience — generative art, a mini-game, a visual poem, an animated infographic, or an interactive story 3. **Personalized artifact**: Use known user context to create something personal and delightful ### Step 4: Execute 1. Read the full SKILL.md body of each selected skill 2. Follow each skill's instructions for technical execution 3. Combine outputs into one cohesive deliverable 4. Present the result with minimal preamble — let the work speak for itself ### Step 5: Reveal Present the surprise with minimal spoilers. A short teaser line, then the artifact. - **Good reveal:** "I made you something ✨" + [the artifact] - **Bad reveal:** "I decided to combine the pptx skill with the canvas-design skill to create a presentation about..." (kills the surprise)
Excerpt, first 2,629 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 0290bec
git clone https://github.com/bytedance/deer-flow git -C deer-flow checkout 0290becc72cc
The author documents no install command, so this uses the repository directly. Our verdict covers commit 0290becc72cc only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
0290becc72cc
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/bytedance/surprise-me/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →bytedance/deer-flow
Use this skill when the user wants a systematic literature review, survey, or synthesis across multiple academic papers on a topic. Also covers annotated bibliographies and cross-paper comparisons. Searches arXiv and…
bytedance/deer-flow
Deploy applications and websites to Vercel. Use this skill when the user requests deployment actions such as "Deploy my app", "Deploy this to production", "Create a preview deployment", "Deploy and give me the link", or…
bytedance/deer-flow
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill…
bytedance/deer-flow
Use this skill when the user requests to generate, create, or produce podcasts from text content. Converts written content into a two-host conversational podcast audio format with natural dialogue.
bytedance/deer-flow
Use this skill when the user requests to generate, create, or make presentations (PPT/PPTX). Creates visually rich slides by generating images for each slide and composing them into a PowerPoint file.
bytedance/deer-flow
Use this skill when the user requests to generate, create, imagine, or visualize images including characters, scenes, products, or any visual content. Supports structured prompts and reference images for guided…
Add this badge to your README
[](https://modelsatlas.com/skills/bytedance/surprise-me/)
<a href="https://modelsatlas.com/skills/bytedance/surprise-me/"><img src="https://modelsatlas.com/skills/bytedance/surprise-me/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about surprise-me
What does the surprise-me skill do?
Is surprise-me safe to install?
What can surprise-me access on my machine?
How current is this page?
Sources
- github.com/bytedance/deer-flow/tree/main/skills/public/surprise- — the audited source at commit 0290becc72cc and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the surprise-me skill do?
- Is surprise-me safe to install?
- What can surprise-me access on my machine?