bmad-idea

Warn

Audited by Socket on Nov 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The creative-workflow purpose is coherent, but its installation instruction delegates trust to an unverified, unpinned skill source. Treat the transitive installation as a significant supply-chain concern; the provided text alone does not establish malicious intent.

Confidence: 91%Severity: 68%
Audit Metadata
Analyzed At
Nov 6, 2026, 09:11 AM
Package URL
pkg:socket/skills-sh/jeo-tech-ai%2Foh-my-unity3d%2Fbmad-idea%2F@ebebad5f88b51a31689948d673200f63a1dbbfee93bdc441cb173a8f549b7189