wds-6-asset-generation

SUSPICIOUS: the stub itself is minimal and not overtly harmful, but its real behavior is unverifiable because all operative instructions are hidden in ./workflow.md. Available evidence suggests a legitimate BMAD/WDS ecosystem with registry-based installs, yet packaging/publisher inconsistencies and mutable install channels make trust only partial rather than strong.