bmad-cis-agent-design-thinking-coach

Warn

Audited by Socket on Aug 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly coherent as a customizable persona/dispatcher, and the `uv` dependency appears official and verifiable. The main risks are framework-level breadth: executing configured activation steps, loading arbitrary local files into context, and dispatching prompts/skills from config, which is more power than a simple design-thinking coach strictly needs.

Confidence: 86%Severity: 54%
Audit Metadata
Analyzed At
Aug 22, 2026, 02:02 PM
Package URL
pkg:socket/skills-sh/bmad-code-org%2Fcis-skills%2Fbmad-cis-agent-design-thinking-coach%2F@05e44cbc0c97c5d630dde888c7a1b37a4e5d35c3ce6a26108618067954f620d8
Security Audit — socket — bmad-cis-agent-design-thinking-coach