Habilidades bmad-orchestrator

📦

bmad-orchestrator

Name: bmad-orchestrator
Author: supercent-io

Riesgo medio ⚡ Contiene scripts⚙️ Comandos externos

Orchestrate BMAD Development Workflows

BMAD workflow orchestrator helps AI development agents manage structured development across Analysis, Planning, Solutioning, and Implementation phases with built-in quality gates.

Soporta: Claude Codex Code(CC)

⚠️ 68 Deficiente

Descargar el ZIP de la skill

Subir en Claude

Ve a Configuración → Capacidades → Skills → Subir skill

Activa y empieza a usar

Pruébalo

Usando "bmad-orchestrator". /workflow-init

Resultado esperado:

BMAD workflow initialized. Configuration created at bmad/config.yaml. Recommended first phase: Analysis (create product brief).

Usando "bmad-orchestrator". /workflow-status

Resultado esperado:

Current Phase: Planning
Completed: Analysis (product-brief-2026-03-13.md)
Next: Create PRD document
Phase Gate: Requires plannotator review before advancing to Solutioning

Auditoría de seguridad

Riesgo medio

v1 • 3/13/2026

This skill is a legitimate BMAD workflow orchestration tool. The static analysis flagged 361 potential issues, but most are false positives. The only real concern is the pipe-to-shell pattern in the install script, which is a common industry practice for developer tool installation (similar to Docker, etc.). External command references are documentation examples, not actual execution. Network calls go to the legitimate plannotator.ai service.

Archivos escaneados

2,992

Líneas analizadas

hallazgos

Auditorías totales

Problemas de riesgo medio (1)

scripts/install.sh:74-78

Remote Script Execution via Pipe to Shell

The install script uses 'curl | sh' pattern to install plannotator CLI. This pipes a remote script directly to shell execution. While common for developer tools, this is an elevated risk pattern.

Problemas de riesgo bajo (2)

SKILL.md:27-169 SETUP.md:10-329 REFERENCE.md:17-528

Documentation Examples Flagged as External Commands

The static scanner flagged Ruby backtick syntax and shell command examples in documentation files (SKILL.md, SETUP.md, REFERENCE.md). These are example commands shown to users, not actual code execution.

SKILL.md:47 SKILL.md:130-132

Document Hashing Misidentified as Weak Crypto

The scanner flagged 'hash' references as weak cryptographic algorithms. This is incorrect - the skill uses document hashes to detect unchanged files for workflow management, not for security purposes.

Factores de riesgo

⚡ Contiene scripts (3)

scripts/install.sh:1-207 scripts/phase-gate-review.sh:1-205 scripts/check-status.sh:1-207

⚙️ Comandos externos (1)

SKILL.md:27-169

Auditado por: claude

Puntuación de calidad

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

Seguridad

Cumplimiento de la especificación

Lo que puedes crear

Initialize New BMAD Project

Set up BMAD workflow configuration for a new project with proper phase structure and documentation folders.

Phase Progress Tracking

Check current phase, completed phases, and recommended next steps for the project.

Quality Gates for Phase Documents

Submit PRD, architecture, and other phase documents to plannotator for review before advancing to next phase.

Prueba estos prompts

Initialize BMAD Workflow

Run /workflow-init to set up BMAD workflow in my project. Configure it for a web application with medium complexity.

Check Current Status

Run /workflow-status to see where we are in the BMAD process and what the next recommended phase is.

Submit Document for Review

Run bash scripts/phase-gate-review.sh docs/prd-myapp.md "PRD Review: myapp" to submit the PRD for plannotator review.

Full Workflow Execution

Help me complete the BMAD workflow: first run /workflow-init, then guide me through each phase until we reach Implementation. Submit each phase document for review before advancing.

Mejores prácticas

Initialize BMAD at project start to establish clear phase structure
Run /workflow-status before each session to understand current phase
Always submit phase documents to plannotator for review before advancing

Evitar

Skipping phase gates by not using plannotator review
Advancing phases without completing required documentation
Creating documents outside the configured output folder

Preguntas frecuentes

What is BMAD?

BMAD stands for Business Model, Architecture, Design. It is a structured AI-driven development methodology that breaks work into four phases: Analysis, Planning, Solutioning, and Implementation.

Which AI platforms support this skill?

Gemini CLI and Claude Code have native support. OpenCode and Codex require orchestration through omx/ohmg-style bridges.

Do I need to install anything extra?

For full functionality, install the plannotator CLI by running bash scripts/install.sh from the skill directory.

How do phase gates work?

Before advancing from one phase to the next, submit your phase document to plannotator for review. If the document hash matches a previous review, the gate is skipped.

Can I customize the workflow?

Yes, edit bmad/config.yaml to customize output folders, project type, language settings, and other configuration options.

What happens if I skip phase reviews?

You can skip plannotator reviews, but this defeats the quality gate purpose. The workflow allows it but recommends review before advancing.