skills/edwinhu/workflows/dewey/Gen Agent Trust Hub

dewey

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the deweypy library and the deweydatapy package (sourced from the official Dewey-Data GitHub repository). It also retrieves research datasets in Parquet and CSV formats from the official downloads.deweydata.io domain.\n- [COMMAND_EXECUTION]: Provides documented shell and Python command examples for dependency installation and data retrieval using standard tools such as pip, uvx, and duckdb. The provided scripts execute specific data-pull logic requested by the user.\n- [INDIRECT_PROMPT_INJECTION]: \n
  • Ingestion points: Processes external research data via DuckDB from remote Dewey Data URLs (documented in references/duckdb.md).\n
  • Boundary markers: The data is handled as structured Parquet/CSV datasets rather than being fed directly into prompts, significantly limiting the injection surface.\n
  • Capability inventory: The skill includes file system writes (using DuckDB's COPY TO) and network access to Dewey's data infrastructure.\n
  • Sanitization: Implements an 'Iron Law' protocol requiring metadata inspection, sampling, and filtering of all external data before ingestion into a local environment.\n- [CREDENTIALS_UNSAFE]: The skill proactively addresses credential security by enforcing an 'Iron Law' against hardcoding API keys. It provides secure implementation patterns using environment variables and local configuration files (~/.config/dewey/apikey) with recommended restrictive file permissions (chmod 600).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 10:36 AM