dewey
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
deweypylibrary and thedeweydatapypackage (sourced from the official Dewey-Data GitHub repository). It also retrieves research datasets in Parquet and CSV formats from the officialdownloads.deweydata.iodomain.\n- [COMMAND_EXECUTION]: Provides documented shell and Python command examples for dependency installation and data retrieval using standard tools such aspip,uvx, andduckdb. The provided scripts execute specific data-pull logic requested by the user.\n- [INDIRECT_PROMPT_INJECTION]: \n - Ingestion points: Processes external research data via DuckDB from remote Dewey Data URLs (documented in
references/duckdb.md).\n - Boundary markers: The data is handled as structured Parquet/CSV datasets rather than being fed directly into prompts, significantly limiting the injection surface.\n
- Capability inventory: The skill includes file system writes (using DuckDB's
COPY TO) and network access to Dewey's data infrastructure.\n - Sanitization: Implements an 'Iron Law' protocol requiring metadata inspection, sampling, and filtering of all external data before ingestion into a local environment.\n- [CREDENTIALS_UNSAFE]: The skill proactively addresses credential security by enforcing an 'Iron Law' against hardcoding API keys. It provides secure implementation patterns using environment variables and local configuration files (
~/.config/dewey/apikey) with recommended restrictive file permissions (chmod 600).
Audit Metadata