user-journey-mapper

SUSPICIOUS: the skill’s stated purpose is generic design guidance, but it is overprivileged with full Bash access and broad activation while defining no concrete toolchain, install path, or bounded workflow. There is no direct evidence of malware or exfiltration, but the capability scope is not proportionate to the stated purpose.