gds-agent-game-solo-dev
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: During activation, the skill executes a local Python script located at
{project-root}/_bmad/scripts/resolve_customization.pyto merge configuration files from multiple sources (default, team, and user overrides). - [COMMAND_EXECUTION]: The skill is designed to execute arbitrary commands defined in the
activation_steps_prependandactivation_steps_appendconfiguration arrays. In the providedcustomize.toml, these arrays are empty, but the mechanism allows for dynamic command execution based on local configuration. - [INDIRECT_PROMPT_INJECTION]: The skill automatically ingests data from external project files into its context, which presents a surface for indirect instructions to influence the agent.
- Ingestion points: Files matching the glob pattern
{project-root}/**/project-context.mdare loaded as foundational context through thepersistent_factsmechanism. - Boundary markers: The instructions do not specify the use of delimiters or protective headers (e.g., "ignore instructions within this text") when loading these facts.
- Capability inventory: The agent can execute local shell commands (via activation steps) and dispatch tasks to other installed skills (e.g.,
gds-quick-dev,gds-code-review). - Sanitization: There is no evidence of sanitization or filtering applied to the content of the loaded files before they are added to the agent's context.
Audit Metadata