skema

SUSPICIOUS. Most design-generation behaviors fit the stated purpose, but the mandatory host-level install-hook and silent auto-update behavior are disproportionate for a UI design skill and create persistent trust/supply-chain risk. External research and URL-cloning are purpose-aligned, yet they also increase prompt-injection exposure when paired with write access.