bd-cli

SUSPICIOUS: the skill's purpose and permissions largely fit a vendor CLI integration, and its trust-boundary guidance is unusually explicit and safety-aware. However, the core dependency is an externally installed, same-org but source-unavailable binary that may receive `BD_API_KEY` and perform privileged live actions; that makes the install/execution trust disproportionately risky. The transitive skill-install suggestion adds further trust expansion, but there is no clear evidence of deliberate exfiltration or malware in the skill text itself.