devup-ui

SUSPICIOUS: the core Devup UI integration guidance is coherent, but the final plugin-install instruction redirects to an unrelated third-party skills repo, creating a disproportionate transitive trust risk. No direct credential theft is evident, but the install source inconsistency materially raises security concern.