bmad-agent-dev

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes Python scripts located within the project's internal directory using uv run. These scripts (resolve_customization.py and resolve_config.py) are used to merge configuration files and resolve project paths. This is a standard part of the skill's initialization workflow.
  • [DATA_EXPOSURE]: The skill reads configuration from .toml files and potentially project documentation files specified in persistent_facts. This data is used to set the agent's persona and context within the local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 10:42 PM
Security Audit — agent-trust-hub — bmad-agent-dev