bmad-project-context

SUSPICIOUS. The skill's core behavior is mostly aligned with its stated repo-instruction management purpose, and data flows stay local with user-approved writes. The main concern is the fallback transitive installation of another skill plus execution of project-local helper scripts, which expands trust beyond the visible skill content. I found no clear credential harvesting, exfiltration, or covert-action behavior.