bmad-auto

Pass

Audited by Socket on Sep 16, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Sep 16, 2026, 05:21 PM
Package URL
pkg:socket/skills-sh/bmad-labs%2Fskills%2Fbmad-auto%2F@f5bfcb64b3cc6b935f31e373218fd2173356fce8f0e1280b70cc50bc49280319