skills/bmad-code-org/bmad-method-test-architecture-enterprise/bmad-tea-framework/Gen Agent Trust Hub
bmad-tea-framework
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts, specifically
resolve_customization.pyandresolve_config.py, located within the project's_bmad/scripts/directory using theuv runcommand. These are internal utility scripts used to manage project-specific configurations. - [EXTERNAL_DOWNLOADS]: The workflow facilitates the installation of standard development dependencies and tools. This includes Node.js packages like
@seontechnologies/playwright-utilsand@seontechnologies/pactjs-utils, as well as standard frameworks such as Playwright and Cypress. It also provides templates for downloading tools like Maestro viacurlin CI environments. - [DYNAMIC_EXECUTION]: The skill installs a write-time enforcement hook,
tea-enforce.cjs, into the project's.claude/hooks/directory. This script is registered in.claude/settings.jsonto monitor and validate test code as it is being written, preventing anti-patterns like hard waits or tautological assertions. - [INDIRECT_PROMPT_INJECTION]: The skill represents an attack surface for indirect injection as it reads and parses various project manifest files (e.g.,
package.json,pyproject.toml,go.mod) to auto-detect the project stack. However, this is a necessary function for its stated purpose, and the skill includes validation checks for the generated outputs.
Audit Metadata