bmad-cis-agent-design-thinking-coach
Warn
Audited by Socket on Aug 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly coherent as a customizable persona/dispatcher, and the `uv` dependency appears official and verifiable. The main risks are framework-level breadth: executing configured activation steps, loading arbitrary local files into context, and dispatching prompts/skills from config, which is more power than a simple design-thinking coach strictly needs.
Confidence: 86%Severity: 54%
Audit Metadata