design-review

SUSPICIOUS: the skill’s core behavior matches its stated design-review purpose, but its trust footprint is larger than a simple QA skill because it relies on same-repo local binaries, optional background telemetry via opaque helpers, browser automation, and autonomous code commits. This looks internally coherent rather than malicious, but the combined execution and telemetry surface makes it higher-risk than a documentation-only skill.