gds-test-automate
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script located at
{project-root}/_bmad/scripts/resolve_customization.pyduring the activation and completion phases. This script is part of the vendor's provided workflow automation tools. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface area because it ingests and processes untrusted data from the project environment.
- Ingestion points: The skill reads
config.yaml,customize.toml, and recursively searches for and loads all files matching the glob pattern{project-root}/**/project-context.md. It also performs automated analysis of the game's source code files. - Boundary markers: The instructions do not specify the use of delimiters (such as XML tags or unique markers) or explicit "ignore" instructions when interpolating the contents of these external files into the agent's context.
- Capability inventory: The skill has the capability to write new files to the
{project-root}/testsdirectory and execute the aforementioned local Python script. - Sanitization: There is no evidence of sanitization, filtering, or validation performed on the text loaded from the project files before it is used to drive the test generation logic.
Audit Metadata