bmad-shard-pro
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of a local Python script (
shard_tool.py) and a memory logging script (memlog.py) using theuv runcommand. These scripts are used for analyzing document structure, performing faithful text splits, and validating the output. This is a standard and documented use of local tools within the skill's environment. - [INDIRECT_PROMPT_INJECTION]: As the skill processes and outlines long documents which may come from external or untrusted sources, it is subject to the inherent risks of indirect prompt injection.
- Ingestion points: The
shard_tool.pyscript reads the content of user-provided markdown and text files during the outline, build, and toc subcommands (SKILL.md, scripts/shard_tool.py). - Boundary markers: The instructions do not specify the use of delimiters or specific "ignore embedded instructions" warnings when the agent is reviewing the source document or its outline.
- Capability inventory: The
shard_tool.pyutility possesses capabilities to write files (Path.write_text), create directories (Path.mkdir), delete files (Path.unlink), and copy files (shutil.copy2). - Sanitization: The tool is designed to perform a verbatim "faithful split," meaning no sanitization or filtering of the document's content is performed.
- [EXTERNAL_DOWNLOADS]: The evaluation configuration in
evals/cases.jsonreferences sample documents hosted on GitHub (github.com/bmad-code-org/...). These references target the author's own repository and a well-known service, and are used solely for validation and testing purposes rather than runtime code execution.
Audit Metadata