bmad-story-automator
Warn
Audited by Socket on Jun 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The description is broadly plausible for a development automation skill, but the actual executable instructions are missing in ./workflow.md, making command scope, data flows, and install trust unverifiable. Risk is driven more by hidden workflow content and autonomous tmux orchestration than by confirmed malicious behavior.
Confidence: 77%Severity: 61%
Audit Metadata