oma-design

SUSPICIOUS: the core design purpose is coherent and file/network scope is mostly proportionate, but the optional getdesign integration introduces medium supply-chain risk due to unpinned `bunx @latest`, unclear official package naming, weak publisher verification, and lack of clear release integrity evidence. No direct credential harvesting or malicious data exfiltration is evident from the provided skill text.