ft-spec

SUSPICIOUS. The core behavior broadly matches a planning/specification skill, but it executes opaque local scripts and installs trust in a second skill (ft-implement) without enough provenance in the provided material. No explicit credential theft, exfiltration endpoint, or malicious payload is visible, so this is not confirmed malware; risk is mainly from unverifiable local script behavior and transitive skill execution.