og-image-design

SUSPICIOUS. The design guidance itself is benign, but the skill’s actual footprint is broader than its stated purpose: it requires a logged-in third-party CLI, routes generation/search through remote services, and asks the agent to install multiple additional skills. Install provenance looks partially legitimate and same-brand, so this is not confirmed malware, but the transitive trust and credential-forwarding model make it a medium-high risk skill.