bmad-forge-idea
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
uvutility to execute local configuration and state management scripts, such asresolve_customization.pyandmemlog.py, located within the project's internal_bmaddirectory. - [DYNAMIC_EXECUTION]: The
scripts/resolve_personas.pyscript uses thesubprocess.runmodule to programmatically invoke other internal Python components to resolve agent and persona information. This is performed using the current system executable and strict argument lists. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external project files and materials to verify user claims, which presents a potential surface for indirect prompt injection.
- Ingestion points: Project files and relevant materials are read into the agent context in
SKILL.mdto verify user-provided summaries. - Boundary markers: No explicit delimiters or specialized warnings for handling the content of these external files are specified in the instructions.
- Capability inventory: The skill uses
uv runto execute scripts that can write and append to the local file system (e.g.,memlog.pyand creatingforged-idea.md). - Sanitization: The skill does not define specific sanitization or filtering logic for the ingested file content, relying instead on its skeptical questioning posture.
Audit Metadata