business-analyst
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the analyzed content.
- [COMMAND_EXECUTION]: The skill includes two utility bash scripts:
discovery-checklist.sh, which facilitates interactive questioning for discovery sessions, andvalidate-brief.sh, which performs basic grep-based validation of markdown sections in generated documents. Both scripts are benign and perform actions consistent with the skill's stated purpose. - [PROMPT_INJECTION]: The instructions in
SKILL.mdare well-structured for role-play and do not contain any patterns attempting to override safety filters, extract system prompts, or disregard previous instructions. - [EXTERNAL_DOWNLOADS]: The skill utilizes
WebSearchandWebFetchtools to conduct market and competitive research. This usage is transparently documented and aligned with the functional requirements of a business analyst role. - [DATA_EXFILTRATION]: No evidence of credential harvesting, unauthorized file access (e.g., to
.sshor.env), or suspicious network activity was found. The skill's data management involves reading from and writing to local directories (bmad/context,bmad/outputs) to facilitate multi-agent collaboration.
Audit Metadata