implement

SUSPICIOUS: the skill’s capabilities are broadly aligned with its stated purpose, but it grants an AI agent substantial autonomous execution power: local command execution, optional package installation, Docker interaction, and iterative code modification based on potentially untrusted spec/repo content. There is no clear credential harvesting or exfiltration path, so this is not malicious, but it is a medium-risk automation skill.