design-systems

SUSPICIOUS: The core design-system purpose is coherent, but the skill expands trust by instructing the agent to install external skills through an opaque local Python installer. There is no direct evidence of credential theft, exfiltration, or malicious payloads in the provided text, so this is not confirmed malware; the main risk is transitive trust and unverifiable install behavior.