bmad-project-context

SUSPICIOUS. The skill's stated purpose broadly matches its file access and editing behavior, and it does not request credentials or route data to third-party endpoints. The main risks are trust in executing repo-local scripts via uv and processing untrusted repository or URL content while retaining write capability, which makes prompt-injection and local code-execution exposure disproportionate enough to warrant caution.