bmod-method
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill framework is designed to ingest and process external, potentially untrusted data—such as meeting transcripts, stakeholder notes, and PRDs—to derive software requirements and tickets. 1. Ingestion points: Data entering the context as described in
help/help.mdand templates in theingest-templates/directory. 2. Boundary markers: The system utilizes Markdown headers and specialized HTML comment markers (<!-- bmad:context -->) as delimiters. 3. Capability inventory: The framework manages agents with capabilities for code execution (bmad-build), repository manipulation, and file-system access. 4. Sanitization: No specific input sanitization or validation of the natural language data is described in the documentation. - [REMOTE_CODE_EXECUTION]: The migration configuration files (
migration-1.tomlandmigration-2.toml) contain instructions to execute internal Python scripts (migrate_v6.pyandtickets.py) using theuv runcommand to upgrade project structures.
Audit Metadata