chat-ui

SUSPICIOUS: the core content is a benign chat UI documentation skill, but it is not fully proportionate because it asks to install other skills and toolchains beyond basic UI usage. The installs appear to come from documented, same-ecosystem sources rather than random attacker infrastructure, so this looks more like transitive-trust and supply-chain risk than malware.