Skills
skills/bmad-code-org/bmad-auto/bmad-auto-setup/Gen Agent Trust Hub

bmad-auto-setup

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the bmad-auto orchestrator package from the author's official GitHub repository (https://github.com/bmad-code-org/bmad-auto.git) during the setup and upgrade process.\n- [REMOTE_CODE_EXECUTION]: Installs and executes the bmad-auto tool via uv tool install, which is a necessary step for the module's automation capabilities.\n- [COMMAND_EXECUTION]: Executes various shell commands to manage the environment and project state, including uv package management and bmad-auto CLI operations (init, validate, version).\n- [COMMAND_EXECUTION]: Runs local Python scripts (merge-config.py, merge-help-csv.py, cleanup-legacy.py) that perform filesystem operations such as writing configuration files and recursively deleting redundant legacy directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 08:16 AM
Security Audit — agent-trust-hub — bmad-auto-setup