design-tokens

SUSPICIOUS. The main design-token and contrast functionality is coherent and mostly benign, and the scanner’s backtick findings are false positives from markdown. Risk comes from scope expansion into image generation plus reliance on unspecified external skill scripts that may receive credentials or user content, creating a transitive trust and credential-forwarding concern without clear provenance in this skill alone.

No clear evidence of embedded malware in this fragment (no network exfiltration, credential theft, or obfuscated payloads). However, it is security-relevant orchestration code: it executes local Python scripts from hardcoded ~/ .claude/skills/... paths without integrity checks and passes manifest-derived reference file paths and generated prompt text to those scripts. If the referenced scripts or manifest inputs are tampered with, an attacker can influence what external code runs and what files the external scripts access. Treat this as a potentially risky execution dispatcher rather than a self-contained safe library.