doubleword
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download an installation script from the official vendor's GitHub repository at
https://raw.githubusercontent.com/doublewordai/dw/main/install.shand mentions theautobatcherlibrary on GitHub. - [REMOTE_CODE_EXECUTION]: The recommended method for installing the
dwCLI involves fetching a remote shell script and piping it to the shell (curl ... | sh). This is the author's official installation method for the supported tooling. - [COMMAND_EXECUTION]: The skill instructions involve the execution of shell commands using
dw,pip, andnpxfor installation and interacting with the inference services. - [PROMPT_INJECTION]: Identified a potential surface for indirect prompt injection. (1) Ingestion points: User-provided
.jsonlfiles and text piped into thedwCLI as documented inSKILL.md. (2) Boundary markers: Not specified in the skill body for processed data. (3) Capability inventory: The skill can execute CLI commands (dw) and perform network requests toapi.doubleword.ai. (4) Sanitization: Not documented in the skill; however, the documentation provides explicit warnings to users about avoiding the inclusion of PII or secrets in batch requests.
Audit Metadata