bmad-eval-runner

The fragment is a Claude Code invocation configuration, not malware. It does not itself read files, execute arbitrary code, or exfiltrate data, but it delegates potentially powerful operations to Claude Code with permission checks disabled. Use of --dangerously-skip-permissions should be restricted to isolated environments, and stdout transcripts should be treated as potentially sensitive.