by bmad-code-org · AI Tool · ★ 55.1k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
npx bmad-method install
npx skills add bmad-code-org/BMAD-METHOD --skill '*'Taken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 55,104 |
| Forks | 6,139 |
| Language | Python |
| Category | AI Tool |
| Quality Score | 63/100 |
| Open Issues | 96 |
| Last Updated | 2026-11-07 |
| Created | 2025-04-13 |
| Platforms | python |
| Est. Tokens | ~15k |
Agile Ai Driven Development — turn an idea or change request into working software without giving up the thinking. Ai Driven Development (AiDD) covers the whole effort, not only the code: what to build, how it holds together, and how it changes as you learn. BMad Method is the agile way to do it — decisions stay explicit, context carries forward, and the process sizes itself to the work.
These tools work well together with BMAD-METHOD for enhanced workflows:
Looking for a BMAD-METHOD alternative? If you're comparing BMAD-METHOD with other ai tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with
from vibe coding to agentic engineering - practice makes claude perfect
A light-weight and powerful meta-prompting, context engineering and spec-driven development system for Claude
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code,
An open-source AI agent that brings the power of Gemini directly into your terminal.
A collection of MCP servers.
Explore other popular ai tool tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: