penpot-workflow

SUSPICIOUS. The design-editing capabilities mostly match the stated purpose, but the skill relies on an unverifiable `pi-penpot` extension and routes visual review through a non-official `penpot.e9n.dev` viewer using share links. That combination creates high supply-chain and data-exposure risk even without clear evidence of confirmed malware.