bmad-taskmaster-mcp-bootstrap
Warn
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the TaskMaster MCP server from a third-party GitHub repository (
https://github.com/eyaltoledano/claude-task-master) which is not included in the trusted vendor list. - [REMOTE_CODE_EXECUTION]: The skill executes remote code through
npx task-master-aiand calls a local shell script (scripts/bootstrap_taskmaster.sh) to provision the server environment. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to check environment readiness, install dependencies, and run server health checks. - [CREDENTIALS_UNSAFE]: The skill instructions require the agent to collect private API keys and tokens from the operator to configure the
.envandmcp.jsonfiles. - [PROMPT_INJECTION]: Indirect prompt injection surface detected through the processing of external data.
- Ingestion points: Reads and writes to shared
tasks.mdfiles. - Boundary markers: No delimiters or instructions to ignore embedded commands are present in the skill.
- Capability inventory: Uses
Bash,Write,Read, andGreptools, allowing for potential exploitation if malicious instructions are present intasks.md. - Sanitization: No sanitization or validation logic is specified for the data processed from shared files.
Audit Metadata