bmad-auto-dev

SUSPICIOUS: the skill is broadly aligned with a local unattended dev workflow and shows no direct exfiltration or third-party credential routing, but it grants substantial execution authority to project-controlled activation steps and ingests large amounts of untrusted local instruction content. Primary risk is command execution and indirect prompt injection within the local repo, not confirmed malware.