skills/akillness/oh-my-gods/bmad-idea/Socket

bmad-idea

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is benign, but the installation model is a transitive third-party skill load with broader local permissions than a creativity workflow appears to need. I see no credential harvesting or exfiltration in the provided content, so this looks more like medium supply-chain/trust risk than confirmed malware.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Apr 24, 2026, 02:48 AM

Package URL

pkg:socket/skills-sh/akillness%2Foh-my-gods%2Fbmad-idea%2F@c81f52e200a7f15789f4da19632db0d04284ae4c