dstack-beads-implement-feature

SUSPICIOUS: The skill’s stated purpose matches its task/commit workflow, but it relies on a local relative dstack binary whose provenance is not verifiable from the skill and whose exact subcommands are not publicly confirmed. No clear malware or credential theft is shown, yet the required black-box CLI and its authority over commits/task completion make the security risk high.