create-dovetail-doc
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a standard utility for interacting with Dovetail's official API via their CLI tool. No malicious patterns were identified during the analysis.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the '@heydovetail/dt' package from the public NPM registry. This is the official package maintained by the vendor and is required for the skill's functionality.
- [COMMAND_EXECUTION]: The skill executes the 'dt' command-line tool, which is the intended functionality for creating and managing Dovetail documents. This is a standard use of CLI tools in agent skills.
- [SAFE]: The skill has a data ingestion surface through local markdown files. Evidence chain: 1. Ingestion points: Local markdown files provided as arguments to the 'dt doc' command in 'SKILL.md'. 2. Boundary markers: None specified in the instructions. 3. Capability inventory: Shell command execution via 'dt doc'. 4. Sanitization: Not explicitly mentioned, as the skill relies on the vendor's CLI tool to handle file content.
Audit Metadata