bmad-sprint-run

SUSPICIOUS: the skill’s purpose matches its orchestration behavior, but it is intentionally high-impact. Its main risk is autonomous, no-confirmation execution of code-changing workflows plus transitive trust in multiple dependent skills; there is no clear credential theft or exfiltration in the supplied content.