bmad-teach-me-testing

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
steps-c/step-05-completion.md

This is a workflow specification for generating a learning-completion report. The main security concern is its instruction to execute arbitrary non-empty resolver output as a terminal instruction; safety depends on controls in the resolver and execution environment, which are not included. Interpolated file paths also require input validation. The fragment alone does not establish malicious intent.

Confidence: 96%Severity: 56%
Audit Metadata
Analyzed At
Oct 14, 2026, 11:11 AM
Package URL
pkg:socket/skills-sh/bmad-code-org%2Fbmad-method-test-architecture-enterprise%2Fbmad-teach-me-testing%2F@cb8b2ad852916054bd5fe5dd44d5da3f26224168bf841c3fde72cc890bc8513e