bmad

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The scripts and docs call out curl|sh to fetch an installer from plannotator.ai (a non-standard vendor-hosted install.sh), which is a high-risk direct-download-and-execute pattern that can deliver malware; the GitHub links shown are standard project references and not flagged.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). bmad ingests only trusted first-party helper/reference files plus the user’s own prompt/packet, and the only outsider-controlled free text it reads at runtime is the specific phase document the user selects for review via scripts/phase-gate-review.sh (it does not continuously monitor arbitrary queues/feeds for outsider submissions).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install script (scripts/install.sh) fetches and executes remote code via "curl -sSfL https://plannotator.ai/install.sh | sh" (also referenced in SETUP.md), which is invoked at runtime to install the required plannotator dependency.