dw-install

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs global installation of the diffwiki package from the NPM registry via npm or pnpm commands.- [COMMAND_EXECUTION]: The skill uses the Bash tool across multiple agents to execute shell commands for software installation and maintenance, including running diffwiki doctor and diffwiki lint.- [INDIRECT_PROMPT_INJECTION]: The dw-researcher agent fetches content from external websites via WebFetch, which is then processed by other agents. Although the agents contain instructions to treat external content as data rather than instructions, the lack of strict structural delimiters for this untrusted content when used in a context where shell execution tools are available presents a potential surface for indirect prompt injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:12 PM