gds-correct-course
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
python3 {project-root}/_bmad/scripts/resolve_customization.pyduring the activation phase (Step 1) and completion phase (Step 6). This script is used to merge configuration settings from team and user-level override files. - [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted project documentation to assess change impact.
- Ingestion points: The workflow reads various Markdown files matching patterns for Game Design Documents (GDD), Narrative, Epics, Architecture, UX, and Tech Specs from the project directory.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when loading these documents into the agent's context.
- Capability inventory: The skill can execute a local Python script and write files (Sprint Change Proposals) to the project's planning artifacts directory.
- Sanitization: The skill does not perform validation or sanitization of the content within the ingested documentation files.
Audit Metadata