paint

SUSPICIOUS. The skill’s core behavior mostly matches its stated purpose as a design-system and UI implementation pipeline, and the referenced genjutsu install sources appear publisher-consistent rather than obviously deceptive. The main risk is not overt exfiltration or malware but transitive trust and broad execution scope: it dynamically loads many sub-skills, can instruct installation of the wider bundle via the third-party skills.sh CLI, and performs extensive shell-based scanning/writing. No confirmed credential harvesting, attacker-controlled endpoints, pre-execution payloads, or stealth directives were found.