skills/bmad-code-org/bmad-module-creative-intelligence-suite/bmad-cis-innovation-strategy/Gen Agent Trust Hub
bmad-cis-innovation-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
uv runto execute a local Python script (resolve_customization.py) located within the vendor's project directory structure to handle configuration merging and finalization logic.\n- [DYNAMIC_EXECUTION]: The workflow allows for the execution of arbitrary actions defined inactivation_steps_prepend,activation_steps_append, andon_completeblocks within the project's configuration files (.toml). This creates a mechanism where the agent's behavior is dynamically determined by external configuration content.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from several external sources to ground its analysis and configure its operation.\n - Ingestion points: Processes
customize.toml,{skill-name}.toml,{skill-name}.user.toml,config.yaml, and files matched bypersistent_factsglobs.\n - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are used when loading facts or configuration into the context.\n
- Capability inventory: The skill possesses the ability to execute shell commands via
uv runand perform filesystem writes to save strategy artifacts.\n - Sanitization: The skill lacks explicit sanitization or validation logic for the content loaded from these external configuration and fact files before it is processed by the agent.
Audit Metadata