open-design

SUSPICIOUS. The core purpose and local artifact-generation capabilities are mostly coherent, and no credential harvesting or explicit exfiltration is shown. The main concern is the transitive installation path to an unrelated third-party skills repo plus support for loading additional file-based skills, which expands trust beyond the stated publisher and is disproportionate to a simple design workflow helper.