speckit-runner

SUSPICIOUS: the skill's overall purpose is coherent for repo automation, but its footprint is high-risk. The main concern is not hidden malware; it is that the operator executes repository-discovered commands while holding dispatch and GitHub credentials, and sends workflow data through a custom gateway. The skill even acknowledges that a hostile repo can exfiltrate those credentials. No pre-execution malware pattern is present, but the trust and data-flow model is broader than a normal GitHub issue runner.