CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

gemini-deep-research

Perform deep, multi-source research using Google Gemini's Deep Research Agent. Use this skill whenever the user asks for comprehensive research, literature reviews, competitive analysis, market research, technology surveys, or any investigation that requires synthesizing information from many web sources. Also trigger when the user says "deep research", "research this thoroughly", "do a comprehensive study on", or wants a structured report with evidence gathered from across the web — even if they don't mention Gemini by name.

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security
High

W007: Insecure credential handling detected in skill instructions.

What this means

The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.

Why it was flagged

The skill instructs the agent to ask the user for an API key if the environment variable is missing and pass it directly via a command-line argument (`--api-key`), which exposes the secret value in the LLM's context and output.

Report incorrect finding
Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

The skill performs web research using Google Gemini's Deep Research Agent, ingesting content from arbitrary web pages and search results gathered during research.

Repository

OpenLAIR/dr-claw

Path

skills/gemini-deep-research/SKILL.md

Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.