execute-spec

SUSPICIOUS: the skill’s purpose aligns with its developer-automation capabilities, and there is no clear exfiltration or malicious installer path. However, it has broad write/bash/agent powers, can operate headlessly through review-and-commit workflows, and processes potentially untrusted spec/reviewer content while relying on opaque local plugin/subagent files, making it a medium security risk rather than benign.