superdesign

SUSPICIOUS: the stated design purpose is plausible, but the skill’s footprint is broader than a simple design helper because it mandates remote instruction fetching, automatic CLI installation, login, and likely transmission of local source files to an external service. The npm install path appears same-brand and not overtly malicious, so this is not confirmed malware, but the mutable remote-instruction flow and third-party code/context forwarding create meaningful medium-high risk.