gds-sprint-planning
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes
uv runto execute a script located at{project-root}/_bmad/scripts/resolve_customization.py. This script is part of the vendor's orchestration framework and is used to resolve workflow customizations from project-local configuration files.- [DYNAMIC_EXECUTION]: The skill executes sequences of activation steps and a terminalon_completeinstruction defined incustomize.tomlor its project-specific overrides. While this allows for flexible workflow behavior, it involves the execution of strings as instructions or commands within the local environment.- [INDIRECT_PROMPT_INJECTION]: The skill parses untrusted data from markdown epic files to extract story metadata for the sprint status report. - Ingestion points: All files matching
*epic*.mdin the{planning_artifacts}directory are read to extract epic and story information. - Boundary markers: None are specified; the skill relies on standard Markdown header patterns (e.g.,
## Epic n:) to structure the data. - Capability inventory: The skill has the capability to write YAML files to the local file system and execute local Python scripts via
uv run. - Sanitization: Story titles and IDs are sanitized into kebab-case keys (e.g.,
1-1-user-authentication) before being written to the output YAML file, which mitigates simple injection attempts in the generated output.
Audit Metadata