speckit-workflow-step

SUSPICIOUS. The core purpose and official CLI usage are coherent, but the skill expands trust to arbitrary catalog URLs and indirectly installs executable custom step types. This is not clearly malicious, but it has meaningful supply-chain risk and a transitive trust dependency on another setup skill.