design-pipeline

SUSPICIOUS: The skill’s high-level purpose is coherent with its capabilities, and there is no clear credential theft, exfiltration endpoint, or malicious pre-execution behavior in the provided text. However, it depends on several unverified local helper scripts whose provenance, network behavior, and integrity are not documented, so the overall risk is medium rather than benign.