install-dt
Warn
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download the
@heydovetail/dtpackage from the npm registry. - [COMMAND_EXECUTION]: The skill directs the execution of shell commands for global installation (
npm install -g), one-off usage (npx), and tool-specific operations like initialization (dt init) and health checks (dt doctor). - [COMMAND_EXECUTION]: The troubleshooting section suggests using
sudoto resolve permission errors during global installation, which is a privilege escalation vector. - [PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by importing content from external sources such as Notion, Confluence, and Google Drive. 1. Ingestion points: Notion, Confluence, Google Drive, Airtable, Marvin, Condens, EnjoyHQ, Productboard, local files. 2. Boundary markers: Absent. 3. Capability inventory: npm installation, npx command execution, shell environment modification, and dt tool operations. 4. Sanitization: Absent.
Audit Metadata