ui-ux-pro-max

SUSPICIOUS: the skill’s purpose is coherent for UI work, but its footprint includes multiple unpinned third-party `npx` tools and ingestion of untrusted external website content that can influence code generation. Main concerns are supply-chain trust and indirect prompt injection rather than confirmed malicious behavior.