speckit-runner

SUSPICIOUS: the skill's behavior mostly matches its stated purpose, but it routes repo context and control through an external Pylot gateway, forwards a dispatch token to third-party workers, invokes another skill transitively, and enables autonomous PR creation. This is not confirmed malware, but it carries meaningful trust and data-flow risk.