skills/openduo/duoduo/duoduo-admin/Gen Agent Trust Hub

duoduo-admin

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various administrative commands to inspect and manage the local environment, including duoduo daemon status, duoduo channel list, and duoduo --version. It also runs an included diagnostic script scripts/v05-upgrade-preflight.sh to automate system probes.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for upgrading the software using npm install -g @openduo/duoduo@latest. These updates are sourced from the official vendor's package on the npm registry.
  • [DATA_EXPOSURE]: The preflight script and manual instructions read from ~/.config/duoduo/.env to verify configuration settings such as FEISHU_BOT_OWNER and FEISHU_DM_POLICY. This access is required for its stated purpose of managing the application's configuration.
  • [PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection as it is designed to manage and refresh prompt-carrying files like descriptor.md and CLAUDE.md under the subconscious directory.
  • Ingestion points: Files like descriptor.md and the subconscious/ prompt tree are read by the skill to explain or refresh configurations.
  • Boundary markers: The instructions do not specify explicit delimiters when reading these files, though the operations are performed in a controlled administrative context.
  • Capability inventory: The skill possesses capabilities for shell command execution, npm package installation, and local file modifications.
  • Sanitization: There is no explicit description of sanitizing the content of the prompt files before processing or displaying them.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 05:52 AM