skills/bmad-code-org/bmad-module-creative-intelligence-suite/bmad-cis-agent-brainstorming-coach/Gen Agent Trust Hub
bmad-cis-agent-brainstorming-coach
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
{project-root}/_bmad/scripts/resolve_customization.pyusinguv runto resolve its configuration during the activation phase. This script is part of the vendor-associated project structure. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from multiple external sources, which constitutes a surface for indirect prompt injection.
- Ingestion points: The skill loads data from
{project-root}/_bmad/cis/config.yaml, various.tomlfiles for persona overrides, and content from files matched by glob patterns in{agent.persistent_facts}. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its core instructions and the data loaded from these files.
- Capability inventory: The skill possesses the ability to execute local scripts and invoke other skills in the system.
- Sanitization: The instructions do not specify any validation or sanitization for the content ingested from the project files.
Audit Metadata