speckit-implement

SUSPICIOUS: the core skill is coherent with its stated implementation purpose and uses official same-org Spec Kit structure, but it grants broad autonomous repo modification and can automatically execute project-defined extension hooks. Main risk is trust expansion from local task/hook content into command execution, not confirmed malware or credential theft.