gds-correct-course
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a Python script (
resolve_customization.py) located within the project's_bmad/scripts/directory usinguv run. This occurs during both the initialization and completion phases to handle configuration logic.\n- [DYNAMIC_EXECUTION]: The workflow incorporates dynamic execution of instructions provided in configuration files (customize.tomland overrides). Specifically, it executes steps defined inactivation_steps_prepend,activation_steps_append, and follows a terminal instruction fromon_complete.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests and processes various external artifacts such as GDDs, Epics, and Narrative documents.\n - Ingestion points: Project artifacts loaded from
{planning_artifacts}and{project_knowledge}directories.\n - Boundary markers: The skill does not define specific boundary markers or use "ignore" instructions to prevent the agent from following directions potentially embedded within the ingested documents.\n
- Capability inventory: The skill possesses capabilities for shell command execution (via
uv) and file system writes.\n - Sanitization: There is no evidence of content sanitization or validation performed on the ingested project documentation before it is utilized in the workflow.
Audit Metadata