d2-architect

SUSPICIOUS. The skill’s purpose and local file access are coherent with codebase diagram generation, and there is no direct evidence of credential theft or exfiltration. However, it runs an unseen dependency installer from a cached plugin path, so install provenance is not verifiable from the skill content; that unresolved supply-chain risk drives the classification.