3d-website-architect

SUSPICIOUS. The core website-building behavior is coherent and there is no clear malware or credential theft, but the skill is not fully self-contained as claimed and asks the agent to install another skill from a personal GitHub repo, creating unnecessary transitive trust. The build/install commands are normal for frontend work, so overall this looks more like a risky/inconsistent skill than a malicious one.