dewey
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and example scripts specify the use of standard Python packages such as
deweypy,duckdb, andpandas. It also references an R packagedeweyrhosted on GitHub for R-based workflows. - [COMMAND_EXECUTION]: The skill provides instructions and examples for executing shell commands, specifically using
uvxto run thedeweyCLI and executing Python scripts (e.g.,btm_safegraph_pull.py) for data processing and export tasks. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a gateway to ingest vast amounts of external structured data (Parquet, CSV) into the agent's environment, which represents a potential attack surface.
- Ingestion points: External data is fetched from Dewey Data's download servers and processed using
duckdbanddeweypy, as seen inexamples/btm_safegraph_pull.pyandreferences/duckdb.md. - Boundary markers: There are no specific instructions or delimiters mentioned to prevent the agent from being influenced by potentially malicious instructions embedded within the ingested data content.
- Capability inventory: The skill possesses capabilities to perform network requests to
deweydata.ioand write files to local directories (e.g.,~/projects/batm/). - Sanitization: The skill lacks explicit sanitization or validation logic for the content of the data files before they are processed by the agent.
Audit Metadata