claude-design

SUSPICIOUS: the skill's core purpose is coherent, and data flows target the official Claude Design service, but it has a broad and high-impact footprint. It analyzes local code, uploads assets and real source files, and performs autonomous browser actions against an authenticated session. Install sources are mostly legitimate same-project or official tooling, so this is not confirmed malware, but the combination of mutable installs, source-file upload, and agent-driven automation makes it a medium-to-high risk skill.