bmad-checkpoint-preview

SUSPICIOUS. The stated purpose is benign review guidance, but the skill's actual footprint includes activation-time command execution and config-driven arbitrary step execution from project-local files. No clear credential harvesting or exfiltration is shown, so this is not malware, but it is broader and riskier than a simple review workflow.