product-design-share

SUSPICIOUS. The stated purpose and main capability are broadly aligned, and no explicit malicious payload appears in this file. Risk is driven by transitive trust in unseen sibling skills and a shell preflight script, plus ambiguous '@Sites' routing and possible token use during deployment. On this file alone, this is not confirmed malware, but it is a medium-risk skill that should not be treated as fully benign without reviewing the referenced files and concrete deployment commands.