Skills
skills/bmad-code-org/bmad-method/bmad-forge-idea/Gen Agent Trust Hub

bmad-forge-idea

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses uv run to execute local Python scripts that manage session state and resolve user customizations.
  • [COMMAND_EXECUTION]: The scripts/resolve_personas.py script uses subprocess.run to call other local Python scripts to discover available personas and configurations. It uses argument lists rather than shell strings, which is a safer practice.
  • [SAFE]: The skill reads local project configuration files (project-context.md, customize.toml, config.yaml) to personalize its behavior and maintain context, which is standard functionality for this type of agent skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 04:28 PM
Security Audit — agent-trust-hub — bmad-forge-idea