lazyweb-apply-design-best-practices

SUSPICIOUS: the skill's stated purpose is design guidance, but its actual mechanism is to dynamically fetch and obey external skills from many third-party sources while holding write/exec-capable tools. The Lazyweb installer appears official, so this is not confirmed malware, but the transitive trust and prompt-injection surface make the skill high risk.