bb-cli

SUSPICIOUS: the skill is broadly consistent with an official bb administration/orchestration guide, and same-org bb/getbb.app sources reduce malicious-lure concern. However, it gives an agent expansive control over remote execution, automations, file operations, network exposure, and third-party plugin installation, so the overall footprint is high-trust and medium-to-high risk even without clear evidence of credential theft or covert exfiltration.