ft-implement

SUSPICIOUS: the workflow is largely coherent for implementation orchestration and has good scope controls, but it relies on executing unverifiable local scripts and repository-defined commands. There is no clear credential theft or exfiltration behavior, so this is better classified as a high-risk vulnerable skill than confirmed malware.