claude-design-ui-framework

SUSPICIOUS: the functionality mostly matches a UI framework skill, and the described API flows are proportionate, but install trust is inconsistent. The biggest issue is the mismatch between the declared publisher (ara.so) and the actual download/source repo (mikesheehan54), plus a prebuilt ZIP distributed outside package registries without integrity metadata. This looks more like a questionable repackaging/distribution pattern than confirmed malware.