specsmith

SUSPICIOUS. The core local spec-management behavior is coherent and mostly benign, but the skill expands its footprint by instructing transitive skill loading and external research ingestion while retaining write/implementation capabilities. The biggest concern is the unverified third-party skill reference via an official installer path, plus prompt-injection exposure from external content.