implement-spec

SUSPICIOUS. The skill’s capabilities mostly align with its stated purpose of implementing a spec, and there is no obvious credential harvesting or third-party install chain. However, it grants broad autonomous development actions and combines external-documentation intake with code-writing subagents, which is a meaningful prompt-injection and workflow-integrity risk for an AI agent.