spec-kit

SUSPICIOUS. The skill’s main footprint matches its stated purpose and its core CLI install path is official and verifiable, so it is not malicious. However, it deliberately enables installing and running third-party extensions, workflows, bundles, and Python/shell step packages from URLs, with unsandboxed execution and possible token use for GitHub-hosted artifacts; that makes it a medium-risk developer workflow skill rather than a benign read-only guide.