bmad-gds

The game-development purpose is coherent, and the supplied instructions show no credential access, exfiltration, or malicious behavior. However, installing an unverified, unpinned third-party skill creates meaningful transitive trust and supply-chain risk.