CodeQL code-quality: empty except, unused import, implicit string concat in builder skills

[risleylima]

Summary

GitHub Code Quality (CodeQL analysis-kinds: code-quality) reports 5 open findings in BMad Builder Python skills after install into consumer repos (e.g. via _bmad / .agents/skills). These match the current main / v2.1.0 content.

Findings

Rule	File	Issue
py/implicit-string-concatenation-in-list (warning)	skills/bmad-agent-builder/assets/init-sanctum-template.py ~170	Adjacent string literals in a list look like a missing comma
py/empty-except (note)	skills/bmad-module-builder/scripts/scaffold-standalone-module.py ~144	except Exception: pass with no explanatory comment
py/empty-except (note)	skills/bmad-agent-builder/scripts/render_report.py ~129	except OSError: pass with no comment
py/empty-except (note)	skills/bmad-workflow-builder/scripts/render_report.py ~129	same (duplicated script)
py/unused-import (note)	skills/bmad-workflow-builder/scripts/tests/test_canon_sync.py ~12	import sys unused

Expected

Skills that ship with BMad Builder should be CodeQL code-quality clean so consumer repos do not inherit false/noise findings in Security → Code quality.

Proposed fix

See upcoming PR: clarify intentional string join with +, add comments on intentional empty except, remove unused sys.

Environment

• Reproduced from installed skills in a Nest/TS API repo using Code Quality on push
• Compared hashes: local skills byte-identical to bmad-builder@main before fix

[coderabbitai]

🔗 Related PRs

#32 - Replace bmad-init dependency with direct config loading [merged]
#36 - fix: complete setup skill with legacy cleanup, result templates, and path fixes [merged]
#44 - fix: HTML quality report renders empty due to data injection mismatch [merged]
#60 - docs: refine prose quality across module contribution guide [merged]
#73 - Fix BMB skills to fall back to legacy per-module config [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!