gds-test-framework
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script at
{project-root}/_bmad/scripts/resolve_customization.pyto handle configuration merging during the activation phase and upon completion. - [COMMAND_EXECUTION]: The workflow performs execution of steps specified in the
activation_steps_prependandactivation_steps_appendconfiguration arrays, allowing for arbitrary command execution within the project environment. - [INDIRECT_PROMPT_INJECTION]: The skill loads information from
{project-root}/**/project-context.mdfiles and treats them as foundational context, which could allow instructions in those files to influence agent behavior. - Ingestion points:
SKILL.mdidentifies{project-root}/**/project-context.mdas a source for persistent facts in the activation section. - Boundary markers: No specific delimiters or safety instructions are provided to the agent for isolating this content from its primary instructions.
- Capability inventory: The skill possesses file-writing capabilities for framework scaffolding and local command execution capabilities via Python scripts.
- Sanitization: No sanitization or validation of the ingested context files is performed.
Audit Metadata