skills/bmad-code-org/bmad-skills/bmad-prd/Socket

bmad-prd

Warn

Audited by Socket on Aug 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core PRD-writing purpose mostly matches the file-writing and review behavior, and uv appears to be an official tool. The main risk is the skill's broad execution surface through local uv-run scripts plus unspecified external research/internal tools and configurable handoff hooks, which make data flows and trust boundaries incomplete from the skill text alone.

Confidence: 80%Severity: 58%

Audit Metadata

Analyzed At

Aug 30, 2026, 10:43 PM

Package URL

pkg:socket/skills-sh/bmad-code-org%2Fbmad-skills%2Fbmad-prd%2F@7c4f6d2b9eb64bd179e4e37726509ea733a5de0a9659fa2c97e01bba484cd336