bmad-cis-agent-storyteller

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: During activation, the skill executes a customization resolver script (resolve_customization.py) located in the project's scripts directory using the uv run command.
  • [COMMAND_EXECUTION]: The skill framework supports "activation steps" (activation_steps_prepend and activation_steps_append) which allow for executing sequences of commands during the agent initialization process.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes a mechanism to load persistent facts from local files in the project directory using a file: prefix and glob patterns, which are then incorporated into the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 02:01 PM
Security Audit — agent-trust-hub — bmad-cis-agent-storyteller