bmad-build

SUSPICIOUS: the skill is internally coherent as a BMAD workflow launcher, but it materially delegates control to project-local code and dynamically generated instructions, with a fallback into another skill's setup flow. This is not clearly malicious, but it is a medium-risk orchestration skill that should only be used in trusted repositories and trusted BMAD installations.