dosu
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx -y @dosu/clito download and execute the Dosu CLI package from the npm registry if it is not already installed locally. - [COMMAND_EXECUTION]: The skill uses the
dosuCLI for multiple operations including authentication, configuration, and data management. It also executes discovery commands such asgit configandlsduring the repository audit process. - [INDIRECT_PROMPT_INJECTION]: The codebase audit procedure in
references/audit.mddirects the agent to read untrusted files from the working tree (e.g.,README.md,package.json, source files) to determine if documentation needs updates. - Ingestion points: Files in the repository working tree are read in
references/audit.md(Step 2). - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the ingested files.
- Capability inventory: The agent can execute arbitrary shell commands via Bash and perform network/API operations through the
dosuCLI. - Sanitization: The skill does not specify any sanitization or validation of the text extracted from the repository files before using it in recommendations.
- [DYNAMIC_EXECUTION]: The
dosu skill installanddosu skill updatecommands inreferences/commands.mdindicate support for dynamically adding or modifying executable capabilities.
Audit Metadata