Agent skill · Audited from source
deep-research
skill · daymade/claude-code-skillsMIT licenceAudited 31 Oct 2026 · source 7abfdd609a49
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7abfdd609a49 and observed filesystem access and no hard-coded secrets. What it does: Creates reusable, source-traced research reports and coordinates provider/mode lanes with original exports. Use for 深度研究, 调研报告, literature reviews, market or company research, and ChatGPT/Kimi/UniFuncs research routes.…
Cite
Cite this page
ModelsAtlas. “deep-research (daymade/claude-code-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/daymade/deep-research
9 skills are called “deep-research”. You are viewing daymade/claude-code-skills.
- daymade/claude-code-skills★ 1.5k✓SAFE
- affaan-m/ECC★ 263k✓SAFE
- bytedance/deer-flow★ 84k✓SAFE
- ruvnet/ruflo★ 73k!CAUTION
- Imbad0202/academic-research-skills★ 50k!CAUTION
and 4 more with this name.
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemDeclared1 observation
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (1)
LOWInventory / provenanceinv.symlink · AGENTS.md
AGENTS.md
- Why
- link not followed
- Fix
- —
Audit 0.4.1 · source sha 7abfdd609a49 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherdaymade GitHub userOwner of the repository this skill is read from
- Source folderdaymade/claude-code-skills/deep-researchThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict7abfdd609a49A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Creates reusable, source-traced research reports and coordinates provider/mode lanes with original exports. Use for 深度研究, 调研报告, literature reviews, market or company research, and ChatGPT/Kimi/UniFuncs research routes.…
---
name: deep-research
description: >-
Creates reusable, source-traced research reports and coordinates provider/mode lanes with original
exports. Use for 深度研究, 调研报告, literature reviews, market or company research, and
ChatGPT/Kimi/UniFuncs research routes. Technology choice uses tech-selection; competitor code uses competitors-analysis.
---
# Deep Research
Create high-fidelity research reports with strict format control, evidence mapping, source governance, and multi-pass synthesis.
## Architecture: Lead Agent + Subagents
```
Lead Agent (coordinator — minimizes raw search context)
|
P0: Environment + source policy setup
|
P1: Question and claim map (decision questions, evidence routes, stop rules)
|
Dispatch ──→ Subagent A ──→ writes task-a.md ──┐
──→ Subagent B ──→ writes task-b.md ──┤ (parallel)
──→ Subagent C ──→ writes task-c.md ──┘
| |
| research-notes/ <────────────────────────┘
|
P2: Dispatch + investigate → evidence packets
P3: Citation registry + source governance
P4: Evidence-mapped outline with counter-evidence and unknowns
P5: Draft from evidence packets; reopen decisive originals
P6: Counter-review (claims, confidence, alternatives)
P7: Verify → asset check and catalog registration
```
**Context discipline:** Keep raw search-result noise in task workspaces. Pass evidence packets to the lead agent, including locators and short source excerpts. Notes are routing aids, not authorities: the lead agent must open the original source for every load-bearing claim, conflicting claim, and exact figure/date/quotation used in the report.
## Run and asset contract — every invocation
Before external retrieval, read [research-asset-contract.md](references/research-asset-contract.md). Create or resume a durable project study **for single-route and multi-route research alike**. Search its explicit prior-study catalog, open relevant earlier originals and record reuse/adapt/reject decisions. Draft the decision questions and provider × actual-mode lanes in `study.json`. Write one exact `dispatch_context` with the user-supplied seed URL, named entities, and verified codes or other identifiers needed for the query. Include that string in **every** lane prompt; [research_assets.py](scripts/research_assets.py) `start` rejects an omission. Capture the user's named seed article or document as an original before external dispatch, and follow the [provider handoff](references/provider-run-contract.md#seed-source-handoff) when a provider cannot read its URL. A model workspace may not see the user's link or local files just because the coordinator does. Then run `provider_runs.py plan`. Keep every user-requested mode in the plan; a route that adds no value, is unavailable or lacks paid authorization gets a reasoned `deferred` event. A report assembled from direct web search and internal subagents still needs a direct-source lane and the same archive.
New studies use schema 2's [request mode contract](references/provider-run-contract.md#request-inventory-independent-of-execution): archive the original request and accepted workflow, interpret the required modes independently of the execution lanes, and map each to matching lanes. An explicit empty mode inventory is valid when none was requested; a missing contract is not. `plan` rejects an omitted or mismatched mapped route. Review the inventory against the original: fields and hashes cannot prove semantic completeness. Schema-1 archives remain readable with request coverage unknown; do not restart old tasks to fill that gap.
Before collecting provider reports, load [report-file-collection.md](references/report-file-collection.md). Use available file/download channels instead of the clipboard. Schema-2 submission and historical import require an unchanged actual-mode observation receipt; prepared prompts do not. A deferred route stays visible with its reason. An uncertain result or legacy request coverage requires explicit `--bounded-reason` at final check/registration; retain that reason without claiming full completion. Catalog search returns current registered details and recorded coverage, not a completed integrity check; follow the [research asset contract](references/research-asset-contract.md#start-before-external-retrieval).
During research, retain the unedited provider outputs, every opened original and every provider-surfaced source URL with status and provenance. Bind report claims to approved original sources; model reports only locate candidate evidence. Before calling a report complete, run `provider_runs.py validate`, `research_assets.py check`, and register the study for later discovery. An answer with citations but no study/source/claim record does not satisfy this Skill. The local scripts record and check files; they make no provider calls and do not authorize paid work.
Before sending a Work/Agent task that may choose its own data plugins, inspect the relevant plugin catalog for per-call credits or charges. A signed-in account and a request to use a data source do not set an unlimited spend ceiling. If an autonomous task can invoke metered plugins without a per-call pause and this task has no explicit spend authorization for them, defer that lane or use a route where the exact calls can be approved first. Even with a budget, a prompt is not a technical charge limit: use a controllable route when the autonomous task cannot enforce it. State authorized limits in the provider prompt for traceability, then read the raw tool log after execution; if a charge occurs despite the boundary, record the observed usage and tell the user. Do not make another paid call to fill a coverage gap.
## Mode Selection
Determine the research mode before starting:
| Dimension | Options |
|-----------|---------|
| **Topic Mode** | Enterprise Research (company/corporation) OR General Research (industry/policy/tech) |
| **Depth Mode** | StandExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 7abfdd6
git clone https://github.com/daymade/claude-code-skills git -C claude-code-skills checkout 7abfdd609a49
The author documents no install command, so this uses the repository directly. Our verdict covers commit 7abfdd609a49 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
7abfdd609a49
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/daymade/deep-research/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All research skills →obra/superpowers
Use when creating new skills, editing existing skills, or verifying skills work before deployment
mattpocock/skills
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
mattpocock/skills
Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
Add this badge to your README
[](https://modelsatlas.com/skills/daymade/deep-research/)
<a href="https://modelsatlas.com/skills/daymade/deep-research/"><img src="https://modelsatlas.com/skills/daymade/deep-research/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about deep-research
What does the deep-research skill do?
Is deep-research safe to install?
What can deep-research access on my machine?
Which assistants does deep-research work with?
How current is this page?
Sources
- github.com/daymade/claude-code-skills/tree/main/deep-research — the audited source at commit 7abfdd609a49 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the deep-research skill do?
- Is deep-research safe to install?
- What can deep-research access on my machine?