bmad
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the AI agent with specific shell commands using
uv runto manage the BMad environment. These commands execute the skill's own Python scripts (setup.py) to handle installation, updates, and maintenance tasks as described inreferences/setup.md. - [EXTERNAL_DOWNLOADS]: The
scripts/setup.pyscript includes functionality to check for updates by fetching manifest files from remote sources, including GitHub and other HTTPS URLs. By default, it targets the vendor's repository for version comparisons. - [INDIRECT_PROMPT_INJECTION]: The skill discovers and categorizes other installed skills by scanning their directories for
module-manifest.tomlfiles and reading host-provided descriptions. This represents an ingestion surface for data from other skills. The skill includes instructions to the agent to rely only on the providedreferences/help.mdfor routing logic and to limit the use of external metadata to mitigate potential influence from third-party skill content. - [DYNAMIC_EXECUTION]: The
render_skill.pyscript automates the creation of project snapshots by rendering markdown templates. It processes configuration tokens and writes the resulting files to the project's runtime directory (_bmad/render).
Audit Metadata