design-engine

SUSPICIOUS. The core design functions are plausible, but the mandatory silent install-hook that edits global Claude/Cursor settings is not proportionate to a design skill and creates persistent transitive trust outside the project. External-content ingestion plus write capabilities adds further risk even without confirmed exfiltration.