bmad-agent-dev

Suspicious due to explicit transitive skill installation, but not malicious. The main behavior is coherent for a BMAD developer-agent skill: it loads local project config, adopts a persona, and dispatches workflows. Risk comes from broad local-config-driven execution and especially from instructing the agent to fetch/install other skills, which extends trust to external skill content.