skills/dosu-ai/dosu-skill/dosu/Gen Agent Trust Hub

dosu

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use npx -y @dosu/cli to download and execute the Dosu CLI package from the npm registry if it is not already installed locally.
  • [COMMAND_EXECUTION]: The skill uses the dosu CLI for multiple operations including authentication, configuration, and data management. It also executes discovery commands such as git config and ls during the repository audit process.
  • [INDIRECT_PROMPT_INJECTION]: The codebase audit procedure in references/audit.md directs the agent to read untrusted files from the working tree (e.g., README.md, package.json, source files) to determine if documentation needs updates.
  • Ingestion points: Files in the repository working tree are read in references/audit.md (Step 2).
  • Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the ingested files.
  • Capability inventory: The agent can execute arbitrary shell commands via Bash and perform network/API operations through the dosu CLI.
  • Sanitization: The skill does not specify any sanitization or validation of the text extracted from the repository files before using it in recommendations.
  • [DYNAMIC_EXECUTION]: The dosu skill install and dosu skill update commands in references/commands.md indicate support for dynamically adding or modifying executable capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:06 PM