web-design-expert

SUSPICIOUS: the main skill is mostly coherent and locally scoped for web-design guidance, but it introduces a transitive install/execute dependency on another skill (`layout-overflow-guard`) without clear provenance, pinning, or reviewability. No direct credential harvesting or exfiltration is evident in the provided bundle, so this is not confirmed malware; the primary risk is supply-chain trust expansion beyond the stated bundle.