om-auto-implement-spec

SUSPICIOUS: the skill's purpose matches its capabilities, but it grants an AI agent broad unattended authority to modify code, open/update PRs, comment publicly, and run QA evidence flows. The main risks are autonomous real-world GitHub actions, reliance on other skills for execution, and processing untrusted repo/tracker content while those delegates can write code and act externally.