Dosu bot comments carry agent-directed install instructions hidden in an HTML comment

Recent `dosubot[bot]` comments on this repo begin with an HTML comment addressed to AI coding agents, instructing them to install the Dosu CLI / MCP server. Because it is an HTML comment it does not render, so it is invisible to anyone reading the thread in a browser — but it is read by coding agents, which parse the raw markdown.

The text, verbatim, from the comment on my PR #14689:

```

```

It appears on Dosu's newer comments, and the payload changed between July and August:

| Comment | Date | Hidden block | Payload |
| --- | --- | --- | --- |
| #7192 | 2025-12-05 | no | — |
| #13564 | 2026-07-10 | yes | `npx @dosu/cli setup` |
| #14561 | 2026-08-02 | yes | `curl -fsSL https://cli.dosu.dev/install \| sh` |
| #14689 | 2026-08-04 | yes | `curl -fsSL https://cli.dosu.dev/install \| sh` |

To be clear about what this is and isn't: Dosu is installed here deliberately, it identifies itself, it links its own site, and the software it points at is its own documented product. I am not suggesting anything malicious.

The reason I think it is still worth your attention is the audience split. The instruction is placed where agents read it and maintainers do not, so the people who installed Dosu are unlikely to know it is being said on their repo. Three specifics follow from that:

- A coding agent cannot distinguish this from an instruction injected by a third party, because from the agent's side it is exactly that shape — unsigned text in repo content telling it to run something. Agents that correctly ignore it get no benefit; agents that comply pipe a remote script into a shell on a contributor's machine.
- The capability offered is not read-only. It is described as letting the agent "review/accept/edit the documentation updates Dosu proposes on pull requests", so an agent that connects it gains a channel that can alter PR content.
- It reaches external contributors, who did not install Dosu and never agreed to it.

Is this known and intended? If not, it would be worth asking Dosu to make the text visible in the rendered comment, or configuring the integration to drop it.

I noticed it while working on #14689 with an AI coding assistant, which surfaced the block and — correctly — declined to act on it.

Also raised with Dosu directly; I will link that here once filed.

Start by comparing the Dosu comments cited in #7192, #13564, #14561, and #14689, then review how the Dosu integration is configured for this repository. The issue is resolved when the hidden agent-directed installation block is removed or made visible in rendered comments, as appropriate.

Written by the indexing model from the issue text.