gds-test-design
Warn
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a Python script located at
{project-root}/_bmad/scripts/resolve_customization.pyduring activation and completion. This script is a tool provided by the vendor (bmad-code-org) within the project's directory structure.\n- [COMMAND_EXECUTION]: The workflow is designed to execute sequences of shell commands defined in theactivation_steps_prepend,activation_steps_append, andon_completefields of the project's TOML configuration files. This functionality allows for the dynamic execution of commands based on content within the project environment.\n- [PROMPT_INJECTION]: The skill ingests data from external project documentation (GDD, feature specs) and uses it to generate test scenarios, presenting an indirect prompt injection surface.\n - Ingestion points: Reads content from
GDD,game-design.md, andproject-context.mdfiles located in the project directory.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when processing external documentation.\n
- Capability inventory: The skill possesses capabilities to execute Python scripts and shell commands as described in the command execution findings.\n
- Sanitization: No validation or sanitization of the documentation content is performed before it is processed by the agent.
Audit Metadata