bmad-prfaq

SUSPICIOUS. The skill’s main PRFAQ-coaching behavior is coherent, but it conditionally expands trust by installing another skill, which is disproportionate to a pure writing/coaching workflow. Because the install path is same-org, publicly documented, and does not forward credentials or route data to unusual endpoints, this is better classified as transitive-trust and supply-chain risk rather than malware.