design-tokens

No clear evidence of embedded malware in this fragment (no network exfiltration, credential theft, or obfuscated payloads). However, it is security-relevant orchestration code: it executes local Python scripts from hardcoded ~/ .claude/skills/... paths without integrity checks and passes manifest-derived reference file paths and generated prompt text to those scripts. If the referenced scripts or manifest inputs are tampered with, an attacker can influence what external code runs and what files the external scripts access. Treat this as a potentially risky execution dispatcher rather than a self-contained safe library.