to-spec

SUSPICIOUS. The core behavior mostly matches the stated purpose of drafting and publishing a spec, and the GitHub/GitLab CLIs are official. The main risks are autonomous external posting without explicit user confirmation, moderate prompt-injection exposure from synthesizing repo content before publishing, and transitive trust in /setup-skills whose behavior is not provided here.