bmad-builder

Pass

Audited by Socket on Jun 20, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Jun 20, 2026, 12:30 PM
Package URL
pkg:socket/skills-sh/aj-geddes%2Fclaude-code-bmad-skills%2Fbmad-builder%2F@670d7b0cff99c0d82c7f3e164ca8975fec756e18f5a7c5c9cb83e6d0a614ccf0
Security Audit — socket — bmad-builder