duoduo-admin
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various administrative commands to inspect and manage the local environment, including
duoduo daemon status,duoduo channel list, andduoduo --version. It also runs an included diagnostic scriptscripts/v05-upgrade-preflight.shto automate system probes. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for upgrading the software using
npm install -g @openduo/duoduo@latest. These updates are sourced from the official vendor's package on the npm registry. - [DATA_EXPOSURE]: The preflight script and manual instructions read from
~/.config/duoduo/.envto verify configuration settings such asFEISHU_BOT_OWNERandFEISHU_DM_POLICY. This access is required for its stated purpose of managing the application's configuration. - [PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection as it is designed to manage and refresh prompt-carrying files like
descriptor.mdandCLAUDE.mdunder thesubconsciousdirectory. - Ingestion points: Files like
descriptor.mdand thesubconscious/prompt tree are read by the skill to explain or refresh configurations. - Boundary markers: The instructions do not specify explicit delimiters when reading these files, though the operations are performed in a controlled administrative context.
- Capability inventory: The skill possesses capabilities for shell command execution, npm package installation, and local file modifications.
- Sanitization: There is no explicit description of sanitizing the content of the prompt files before processing or displaying them.
Audit Metadata