creative-director

SUSPICIOUS. The stated purpose is benign and the visible entry does not request credentials or perform exfiltration, but it primarily acts as a pointer to install a separate upstream skill from a personal GitHub repository. The main risk is transitive trust and unpinned supply-chain exposure, not confirmed malicious behavior.