frontend-core-architecture

SUSPICIOUS. The skill’s actual content is a harmless frontend architecture guide with no credential access, code execution, or exfiltration behavior. The main risk is supply-chain trust: the public install metadata points to a GitHub source whose owner identity does not cleanly match the claimed publisher, and the skills install flow lacks strong verification. This is not confirmed malware, but the provenance inconsistency makes the skill unsuitable to classify as fully benign.