speckit-converge

SUSPICIOUS: core purpose and local file access are coherent with an official Spec Kit converge skill, but the built-in execution of mandatory extension hooks from repo-local configuration expands trust beyond simple task analysis. No direct malware or exfiltration is present in the supplied skill text; the main risk is transitive execution of unverified local extension commands.