The Agent Skills Directory

[SAFE]: The skill consists entirely of Markdown templates and configuration files. It contains no executable scripts (Python, JavaScript, or Shell).
[EXTERNAL_DOWNLOADS]: The configuration in bmod.toml and instructions in SKILL.md reference the vendor's official GitHub repository (bmad-code-org/BMAD-METHOD) for updates and dependency installation. These are trusted vendor resources and do not represent a security risk.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates that ingest user-supplied information (e.g., project details, funding guidelines) to generate documents. While this is an ingestion point, the skill has no dangerous capabilities (such as network access or shell execution) that could be exploited via malicious input. The templates include instructions for the agent to validate and review the generated content using a defined rubric.

bmod-founder