design-taste-frontend

SUSPICIOUS. The skill's design purpose is benign, but its install instructions are inconsistent with the cited upstream project and rely on globally installing code from an unpinned third-party GitHub clone. No direct credential theft or exfiltration is shown, but install trust is weak enough to make the skill risky.

No direct indicators of overt malware (e.g., network exfiltration, credential theft, or persistence) are present in this snippet. However, the code’s core behavior—PowerShell-based extraction and subsequent detached execution of a bundled Windows .exe, with no integrity verification of the ZIP/exe—creates a significant supply-chain/execution risk if the packaged ZIP or executable is tampered with. This module should be treated as high-risk from an operational validation standpoint and reviewed/validated against expected, known-good artifacts (hash/signature checks, ZIP content constraints, and clearer execution/visibility expectations).