skf-setup
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell command execution to manage the project environment, including directory management commands like
mkdir,mktemp,rm, andrmdir, and interaction with external CLI toolsqmdandccc.\n- [DYNAMIC_EXECUTION]: The skill allows for the execution of arbitrary shell commands through user-configurable hooks such ason_complete,activation_steps_prepend, andactivation_steps_appenddefined incustomize.tomlfiles.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration files and external tool outputs, creating a surface for indirect instructions.\n - Ingestion points: Configuration data is read from
{project-root}/_bmad/skf/config.yaml,preferences.yaml, andcustomize.toml. Tool output is parsed fromqmdandcccCLI calls.\n - Boundary markers: Data is staged using a JSON-formatted heredoc in
references/report.mdto maintain structure, though variables are interpolated directly into the template.\n - Capability inventory: The skill possesses the ability to write to the file system, execute arbitrary shell commands via configuration hooks, and run local Python scripts using
uv run.\n - Sanitization: A
Halt contractprovides basic character escaping for error messages, replacing single quotes with backticks and normalizing slashes.
Audit Metadata