sample-module-setup

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill runs local Python scripts included in the package (merge-config.py, merge-help-csv.py, cleanup-legacy.py) to manage YAML configurations and CSV data. These operations are scoped to the project's internal _bmad directory.
  • [SAFE]: User-sensitive data (e.g., user_name, communication_language) is handled with care, stored exclusively in a designated config.user.yaml file intended for local use, rather than the shared project configuration.
  • [SAFE]: The cleanup process includes a safety verification step that checks for the existence of skills in the target installation directory (.claude/skills) before removing legacy files, preventing accidental data loss.
  • [SAFE]: No external network requests, data exfiltration patterns, or obfuscated content were detected. The skill uses yaml.safe_load() for all configuration parsing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 11:24 AM
Security Audit — agent-trust-hub — sample-module-setup