speckit-opsmill-prep

SUSPICIOUS: the skill's repo-planning purpose is coherent, but it grants an agent autonomous multi-step write/commit behavior and lets arbitrary fetched PRD content steer those actions. Main risk is indirect prompt injection combined with autonomous commits, not malware or credential theft.