gds-e2e-scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
resolve_customization.pylocated within the project's own directory structure ({project-root}/_bmad/scripts/). This is used to handle configuration merging and is a standard part of the vendor's workflow management. - [DATA_EXPOSURE]: The skill reads project-specific metadata and context files (e.g.,
project-context.md,config.yaml) to tailor the generated code. These operations are local and consistent with the skill's purpose of scaffolding infrastructure for the specific project. - [REMOTE_CODE_EXECUTION]: No remote code execution or suspicious external downloads were detected. All generated code is written locally to the project's test directories.
Audit Metadata