nextstage-spec-driven

SUSPICIOUS: The skill’s purpose and capabilities mostly align for a project-delivery orchestrator, and the explicit installer path is a same-brand npm package rather than an obviously rogue payload. The main concern is transitive trust: it delegates to many worker skills and recommends installing complement skills via a preset without exposing the exact downstream instructions or permissions in this artifact. No direct credential harvesting, exfiltration endpoint, pre-execution shell directive, or unverifiable binary is evident here, so this is not malicious, but it carries medium risk due to broad delegation and skill-install chaining.