← Back to Skills Marketplace
104
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openai-deep-research-skill
Description
Execute multi-step deep research with the OpenAI Responses API, including question decomposition, evidence gathering with web search, contradiction tracking,...
Usage Guidance
This skill is mostly coherent for performing cited research with the OpenAI Responses API, but take these precautions before installing or running it:
- The SKILL.md and code require an OpenAI API key (OPENAI_API_KEY) even though the registry metadata did not declare it — do not supply sensitive org-wide keys unless you trust and have reviewed the code.
- The script allows setting OPENAI_BASE_URL (custom gateway). Only point this to endpoints you control or trust; a malicious gateway could capture prompts/responses or API keys if you pass them explicitly.
- Installation is local via pip installing the bundled requirements (openai package). Run in an isolated environment (virtualenv/container) if you want to limit system exposure.
- The tool writes output files to outputs/...; review produced artifacts for sensitive content before sharing them.
- If you need extra safety, run with --dry-run or --disable-web-search first, and inspect scripts/deep_research.py to confirm it behaves as you expect.
If you want higher assurance, ask the publisher to update registry metadata to declare OPENAI_API_KEY and OPENAI_BASE_URL, and request a short security note explaining whether the code ever transmits data to endpoints other than the Responses API and the optional web-search tool.
Capability Analysis
Type: OpenClaw Skill
Name: openai-deep-research-skill
Version: 0.1.0
The skill implements a structured multi-step research workflow (Plan -> Research -> Synthesize) using the OpenAI Responses API. The core logic in `scripts/deep_research.py` is well-implemented, utilizing standard libraries and the official OpenAI SDK for evidence gathering and report generation. There are no signs of malicious behavior such as data exfiltration, unauthorized shell execution, or persistence; the script strictly manages research artifacts within a local output directory and communicates only with the configured OpenAI endpoint.
Capability Assessment
Purpose & Capability
The name/description (deep research using the OpenAI Responses API) matches the included script and README: the tool decomposes questions, gathers evidence (optionally via a web-search tool) and writes audit artifacts. However, the registry metadata claims there are no required environment variables or primary credential while the SKILL.md and scripts explicitly require OPENAI_API_KEY (and optionally OPENAI_BASE_URL). This discrepancy is a proportionality/information-gap issue.
Instruction Scope
SKILL.md and the Python script restrict activity to research workflow: planning, calling the OpenAI Responses API, optional web-search tool usage, and writing local artifact files under outputs/. Instructions do not direct reading unrelated system files or harvesting environment variables beyond the API key/base URL. The workflow also provides a dry-run mode to avoid API calls.
Install Mechanism
There is no remote installer; the SKILL.md tells the user to pip install from the bundled scripts/requirements.txt which only lists the official openai package. No remote downloads or executables are fetched, and included code runs locally. This is low install risk.
Credentials
The tool legitimately needs an OpenAI API key, but the registry metadata failing to list OPENAI_API_KEY (and OPENAI_BASE_URL) is inconsistent and could mislead users about what secrets the skill will use. The script allows pointing the client to an arbitrary OPENAI_BASE_URL (a user-controlled gateway). That feature is reasonable for some deployments but also increases risk: if you pass a malicious base URL you could exfiltrate prompts/responses to an attacker. Require/declare OPENAI_API_KEY in metadata and be cautious where you set base URL.
Persistence & Privilege
always is false; the skill does not request forced inclusion or write global agent configuration. It writes run artifacts into an outputs/<timestamp>-<slug> directory under the working directory, which is expected for this purpose and not an escalation of privilege.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openai-deep-research-skill - After installation, invoke the skill by name or use
/openai-deep-research-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial publish
Metadata
Frequently Asked Questions
What is OpenAI Deep Research Skill?
Execute multi-step deep research with the OpenAI Responses API, including question decomposition, evidence gathering with web search, contradiction tracking,... It is an AI Agent Skill for Claude Code / OpenClaw, with 104 downloads so far.
How do I install OpenAI Deep Research Skill?
Run "/install openai-deep-research-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenAI Deep Research Skill free?
Yes, OpenAI Deep Research Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenAI Deep Research Skill support?
OpenAI Deep Research Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenAI Deep Research Skill?
It is built and maintained by Grus (@guanglechen); the current version is v0.1.0.
More Skills