plan-design-review

SUSPICIOUS. The core design-review behavior is legitimate, and many static findings are documentation false positives, but the skill’s actual footprint is much broader than its stated purpose. It invokes numerous trusted helper binaries, logs telemetry, syncs artifacts, edits repo guidance files, and can create commits or migration changes, making scope and execution trust disproportionate for a design-plan review skill.