bmad-cis-storytelling

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The workflow explicitly runs a local resolver and executes configuration-driven steps (activation_steps_prepend/append and a resolved on_complete instruction), which creates an arbitrary command-execution / supply-chain risk if those configuration entries are modified or injected with malicious commands.