n8n-architect

This skill is coherent with its stated purpose of n8n workflow engineering, and its file access, credential handling, and network actions mostly fit that role. The main risk is supply-chain trust: it tells the agent to execute third-party npm CLIs via `npx --yes`, giving downloaded code broad control over local files, credentials, and n8n operations. Overall this is suspicious from an install-trust and operational-risk perspective, but not malicious based on the provided content.