run-deep-research — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited run-deep-research (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use deep-research-client for source-backed research tasks that should produce a report with citations and provider metadata.
Canonical project: https://github.com/monarch-initiative/deep-research-client
Do not add a skill README.md. The operative agent instructions belong in this SKILL.md; the main repository is the human-facing source of broader project context.
Select the command form from the current environment:
deep-research-client repository, use uv run deep-research-client ....deep-research-client ....uv is available, use uvx deep-research-client ....Before hard-coding a provider or model, prefer checking local availability:
deep-research-client providers
deep-research-client modelsProvider names and aliases can vary by installed version or local deployment. Trust the CLI output over stale examples.
Be explicit about speed, depth, cost, and source type. If the user has not already made that trade-off clear, ask before using expensive or long-running providers.
Use this default selection logic:
| Need | Provider guidance |
|---|---|
| Fast current/web answer | Perplexity sonar or sonar-pro |
| Deeper current/web synthesis | Perplexity sonar-deep-research |
| Comprehensive general report | OpenAI deep research |
| Scientific literature review | Edison/Falcon |
| Iterative agent-based deep research | Cyberian |
| Site-specific scientific agent workflow | OpenScientist, only when providers reports it |
Edison Scientific is the successor/spinoff context for the old FutureHouse Falcon integration. The client and older examples may still use the provider name falcon for compatibility, while newer docs may say edison.
Use whichever provider name the installed CLI reports. Prefer EDISON_API_KEY; treat FUTUREHOUSE_API_KEY as a legacy fallback if the client supports it.
Cyberian is not a simple hosted API provider. It runs a local agent workflow through agentapi using agents such as Claude, Codex, Aider, Cursor, or Goose. Use it when the user wants an exhaustive, iterative research pass and is comfortable with a slow, visible local-agent workflow.
For testing or cost control, consider limiting iterations if the installed Cyberian version supports it:
deep-research-client research "query" --provider cyberian \
--param agent_type=codex \
--param max_iterations=2OpenScientist may be exposed by site-specific or newer deep-research-client deployments for scientific research workflows. Do not assume the provider name, model name, or setup from memory; use providers, models, and local docs to confirm availability before invoking it.
Minimal command pattern:
deep-research-client research "research question" \
--provider perplexity \
--model sonar-pro \
--output research.mdUse --input-file for long prompts. Use --template and --var only when the user supplies a template or when using a bundled template intentionally, such as examples/gene_research.md.
Treat ~/.deep_research_cache/ as valuable user data. It can contain expensive prior research results and provenance.
list-cache or search-cache freely for non-destructive inspection.--no-cache only when the user asks for a fresh result or the task clearly requires bypassing stale results.clear-cache, delete cache files, or remove ~/.deep_research_cache/ unless the user explicitly asks for cache deletion and confirms they understand it removes saved research.Prefer reports with:
If the selected provider is unavailable, report the exact missing requirement, such as an API key, agentapi, Cyberian installation, or an unavailable local provider such as OpenScientist.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.