bmad-testarch-ci
Warn
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes helper scripts located within the project's
_bmad/scriptsdirectory (e.g.,resolve_customization.py,resolve_config.py) to manage configuration and customization logic. - [DYNAMIC_EXECUTION]: Several steps (e.g., in
step-01-validate.mdandstep-04-validate-and-summary.md) include anOn Completetrigger that resolves a command string from theworkflow.on_completeconfiguration and instructs the agent to execute it as a terminal command. - [EXTERNAL_DOWNLOADS]: The generated CI pipeline templates include steps to download the Maestro CLI from its official GitHub repository releases. This targets a well-known service for a specific development tool and is a standard functional requirement.
- [INDIRECT_PROMPT_INJECTION]: The skill's evaluation plan rendering logic (
step-03b-render-evaluation-plans.md) reads and processesevaluation-ci-plan.jsonfiles. These files are used to dynamically modify the CI pipeline structure, creating an ingestion surface where data influences agent-generated code. - Ingestion points:
ci/evaluation-ci-plan.jsonfiles detected in the project root viagit ls-files. - Boundary markers: Processing is constrained by the evaluation plan schema and placement rules, but specific delimiters within the file are absent.
- Capability inventory: The skill has capabilities to write CI configuration files, list project files, and execute shell commands via
npm exec. - Sanitization: The skill attempts to validate plans by running
tea-evaluate checkvianpm execbefore rendering them into the pipeline.
Audit Metadata