motion-design

SUSPICIOUS. The animation guidance itself is benign and well-aligned, but the first-run companion check and instruction to install additional third-party skills are out of scope and create avoidable transitive supply-chain risk. No credential theft, exploit code, or clear exfiltration is present.