Data security & privacy review

Is market-research-skills safe?

Agent  genli-ai/market-research-skills

agent-skillsclaude-codeclaude-skillskills-sh

What is market-research-skills?

Turn Claude into a disciplined research analyst — verify facts against primary sources, brief any topic, draft flagship reports. Standalone or chained; runs across LLM terminals. | 把 Claude 变成讲纪律的研究分析师:核实事实、主题简报、旗舰研报,引用一手来源、绝不造数;可单用或串联,跨 LLM 终端。

Type: Agent License: MIT Source: repository ↗

Data-security signals

Public, checkable facts about market-research-skills — they show the risk surface, not what it does with your data at runtime.

  • Open-source — the MIT-licensed code is publicly auditable on its public repository.
  • High access surface — as an AI agent, it can run with your keys, files, environment and network.
  • Maintenance — actively published.
  • ?
    Independent exfiltration test — not yet independently tested by Oxavion.

Is market-research-skills safe? The honest answer.

The signals above show what market-research-skills can reach. But no public metadata reveals what it actually does with your data once it runs — that only shows up when you watch it in a sandbox. Oxavion runs market-research-skills with planted canary secrets and watches every outbound channel, then emails you the evidence.

✓ Request received — we'll run the scan and email your report shortly.

We scan market-research-skills in our sandbox and email your report. No install, no access to your systems.

How to tell if market-research-skills is safe

Before you trust any AI tool with your environment, check:

  1. Is the source auditable? Yes — open-source, you can read it.
  2. Does it need your keys or credentials? Most agents do — so it holds them at runtime.
  3. Does it make outbound network calls, and where to? The repo hints at this; only a run confirms it.
  4. Has it been tested for data exfiltration? Not yet — this is the one you cannot verify from the outside.

The first three you can check from the repo yourself. The last — what it does with your data at runtime — needs a test. That is exactly what an Oxavion scan does →

Frequently asked

Is market-research-skills safe to use?
It depends on what it does with your data at runtime — something a static look can't settle. Oxavion answers it empirically: we sandbox market-research-skills, feed it canary secrets and data, and report exactly what (if anything) leaves. Request a free scan for a verdict on the version you run.
How does Oxavion test it?
An isolated gVisor micro-VM, a transparent egress gateway that captures HTTP/S, DNS and raw TCP, planted canary secrets/PII, and encoding-aware detection — aligned to OWASP LLM Top 10 and MITRE ATLAS, calibrated to zero false-negatives / zero false-positives.

Related Agents