audit-uiux-design-system

SUSPICIOUS: the core purpose is coherent for a design-audit skill, but risk is elevated by transitive skill installation, unpinned runtime execution of Playwright via npm, and external research services that expose the agent to untrusted content. This is not confirmed malware, but it is broader and riskier than a purely local UI audit skill.