design-consultation

SUSPICIOUS. The core design-system workflow is plausible, but this skill’s real footprint is much broader than design consultation: it performs telemetry, artifact syncing, local state harvesting, setup/install flows, repo-routing injection, and git commits. The install path for Bun appears official, so this is not confirmed malware, but the overall scope and data flows are disproportionate enough to treat as medium-high risk.