bmad-correct-course

SUSPICIOUS: The stated purpose is legitimate and mostly aligned with reading project docs and writing a proposal, but install/execution trust is weak because activation executes repository-controlled scripts and customization-defined steps. No clear malicious exfiltration is present, yet the skill grants project content a disproportionate ability to run code during activation.