implement-plan

SUSPICIOUS. The skill is broadly aligned with its stated purpose and has no obvious exfiltration or installer abuse, but it grants an agent meaningful autonomous write/execute authority: it edits code, runs plan/repo-defined verification commands, and makes local git commits by default. Risk comes from acting on potentially untrusted plan content and repository hooks/tooling, not from malware-like data theft.