vue-design-system

SUSPICIOUS. Most Vue/UI routing behavior is coherent, and the official PrimeVue/Quasar/Playwright MCP usage is broadly proportional despite unpinned npx installs. The major inconsistency is Penpot: the skill explicitly rejects Penpot’s official MCP package and instead installs a third-party personal MCP server, then forwards PENPOT_ACCESS_TOKEN to it. That credential-routing and publisher mismatch makes the skill high risk even though the rest looks like a normal framework guide.