Skills
Navigate
skills/bmad-code-org/bmad-method/bmad-agent-dev/Gen Agent Trust Hub

bmad-agent-dev

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script {project-root}/_bmad/scripts/resolve_customization.py to merge configuration files on activation. This is a standard initialization pattern within the BMad framework and does not involve remote code or untrusted input.
  • [COMMAND_EXECUTION]: The skill allows for the execution of steps defined in activation_steps_prepend and activation_steps_append. In the provided configuration, these lists are empty, but the mechanism allows for shell command execution if configured by the user in local .toml files.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 06:46 AM
Security Audit — agent-trust-hub — bmad-agent-dev