spec-orchestrate

SUSPICIOUS: the core orchestration purpose is coherent, but the skill has a high-impact footprint: unattended Issue-to-PR automation, transitive dependence on other worker skills/delegation backends, and processing of untrusted Issue content that can drive code changes and PR creation. No confirmed credential theft or overt malware is shown, but overall risk is medium-high due to autonomy and prompt-injection exposure.