product-design-audit

SUSPICIOUS: the core screenshot-based UX audit behavior is coherent with the stated purpose, but the skill expands trust through missing referenced skills, an unspecified preflight script, and optional token/context loading. No direct malicious payload or overt credential theft is visible here, yet the indirect execution and data-handling scope make it riskier than a simple documentation-only audit skill.