bmad-agent-analyst

SUSPICIOUS: the stated BA purpose is plausible, but the skill’s real footprint includes automatic execution of project-defined activation steps and ingestion of arbitrary project files into session context. No clear malicious endpoint or credential harvesting is shown, and `uv` provenance is consistent, but the execution hooks make the skill broader and riskier than a normal persona-only analyst skill.