bmad-build

SUSPICIOUS: The skill is broadly coherent with its build-orchestration purpose, but it expands trust in two ways: it executes a project-local renderer and, if missing, instructs the agent to install another skill from a GitHub repo through the skills CLI. Provenance appears same-org and documented, so this is not malware, but the transitive installation and dynamic dependency resolution make it medium risk.