spec

SUSPICIOUS: the skill’s broad workflow is mostly aligned with a spec/issue-filing assistant, but it is overgrown for that purpose and relies on many same-org local helper binaries, eval-driven shell plumbing, optional remote telemetry/artifact sync, and autonomous GitHub/git actions. This looks more like a high-trust gstack orchestration skill than a narrowly scoped spec writer; not confirmed malware, but medium-high risk.