write-openspec-docs

SUSPICIOUS: the core docs-writing behavior is benign and well-scoped, but the instruction to load an unpinned, ambiguously sourced third-party skill is disproportionate and adds transitive supply-chain risk. No direct credential access, exfiltration, or remote execution appears in this skill itself.