implement-spec

SUSPICIOUS: the skill’s core purpose is coherent for autonomous repo implementation, and its visible tool/data flows are mostly proportionate. The main risks are high-impact autonomous code/push behavior, processing untrusted PR/spec text while able to execute and write, and transitive use of other skills whose trust cannot be verified here.