mvp-spec

Suspicious but not malicious. The skill is internally coherent as an analysis-to-spec orchestrator, and there is no external install path, credential request, or remote exfiltration. Main risk is disproportionate autonomy: it chains hidden local skills, processes untrusted external content, may run tests/builds, and writes local telemetry without explicit per-action approval.