beads
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
bdcommand-line utility to perform task management operations such as listing, creating, and updating project issues. These operations are restricted to the local development environment and the Beads workspace context. - [PROMPT_INJECTION]: The skill processes task metadata (titles and descriptions) retrieved via the
bd showandbd listcommands. While this creates a surface for indirect prompt injection from the task database, the skill includes instructions to prefer JSON output for programmatic parsing, which helps mitigate accidental interpretation of task content as instructions.
Audit Metadata