bmad-story-automator

Warn

Audited by Socket on Jun 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The description is broadly plausible for a development automation skill, but the actual executable instructions are missing in ./workflow.md, making command scope, data flows, and install trust unverifiable. Risk is driven more by hidden workflow content and autonomous tmux orchestration than by confirmed malicious behavior.

Confidence: 77%Severity: 61%
Audit Metadata
Analyzed At
Jun 22, 2026, 11:24 PM
Package URL
pkg:socket/skills-sh/terryso%2Fopen-agent-sdk-swift%2Fbmad-story-automator%2F@d4e71eda860d3c2403db62a9cd0a71c3afc406a88b4fed1b507445e737d65535
Security Audit — socket — bmad-story-automator