om-auto-write-spec

SUSPICIOUS: the skill is broadly aligned with its purpose and shows no runtime downloader, proxy credential routing, or overt exfiltration, but it does enable unattended external actions and depends transitively on other locally installed skills/descriptors. Risk is moderate from autonomous PR/tracker mutations and expanded screenshot evidence handling, not from confirmed malware behavior.