bmad-agent-builder
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The scripts
scripts/scan-scripts.pyandscripts/prepass.pyusesubprocess.runto execute external analysis tools includingruff,shellcheck, andbiome, as well as internal token counting utilities. The skill also supports the execution of shell commands defined by the user in theactivation_steps_prependandactivation_steps_appendfields of thecustomize.tomlconfiguration during agent startup. - [EXTERNAL_DOWNLOADS]: The skill utilizes
uvandnpxto dynamically download and run packages such astiktoken,ruff, and@biomejs/biome. These tools are used to perform static analysis and compute metrics for the agents being built or analyzed. - [DYNAMIC_EXECUTION]: The builder process involves generating agent-specific Python and shell scripts (
wake.py,init-sanctum.py) from templates (assets/wake-template.py,assets/init-sanctum-template.py) and executing them to initialize agent memory and state. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill reads and processes the contents of external agent files located in
{target-agent-path}during Analyze and Edit intent processing. - Boundary markers: There are no explicit delimiters or boundary markers implemented to isolate external agent content from the builder's internal instructions.
- Capability inventory: The skill includes capabilities for modifying the filesystem and executing shell commands via subprocess calls.
- Sanitization: The skill does not perform sanitization on the data read from external agent files before using it in analysis lenses or including it in generated reports.
- Ingestion points: The skill reads and processes the contents of external agent files located in
Audit Metadata