bmad

This Bash script submits a local document to plannotator and updates a local workflow-status YAML file. The fallback path can execute injected Python if an attacker controls DOC_FILE or TITLE and the primary submission fails; the script also records approval based on submission success rather than verified human approval. No direct network exfiltration or credential theft is shown. Severity is moderate due to conditional code injection and workflow-integrity risk.