implement-openspec-changes

SUSPICIOUS: the skill’s stated purpose matches its capabilities, but it grants broad autonomous local development actions and relies on transitive trust in other installed skills to edit code, review it, and create commits. No direct exfiltration or malicious mismatch is evident in this skill alone, but the dependency-skill chain and autonomous commit behavior make it medium risk rather than benign.