gds-agent-tech-writer
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Python script during activation using
uv runat{project-root}/_bmad/scripts/resolve_customization.py. This is a vendor-provided mechanism for merging configuration layers. \n- [INDIRECT_PROMPT_INJECTION]: The skill has a significant indirect injection surface. \n - Ingestion Points:
update-standards.mdaccepts user preferences,write-document.mdperforms web searches and research, andvalidate-doc.mdreviews external documentation. \n - Boundary Markers: The instructions do not define delimiters or specific 'ignore instructions' warnings for processing these external inputs. \n
- Capability Inventory: The agent has the ability to write to files (
documentation-standards.md), execute framework commands (uv run), and invoke subprocesses for research. \n - Sanitization: No sanitization or content validation logic is present in the instructions. \n- [INDIRECT_PROMPT_INJECTION]: The sub-skill
update-standards.mdallows user-provided rules to be saved intodocumentation-standards.mdas 'User Specified CRITICAL Rules'. These rules are subsequently treated as high-priority instructions for other tasks, creating a vector for persistent instruction injection. \n- [DYNAMIC_EXECUTION]: The skill utilizes subprocesses for web searching, research, and document validation. Additionally, the activation flow executes arbitrary steps defined in theactivation_steps_prependandactivation_steps_appendconfiguration blocks.
Audit Metadata