design-tool-picker

SUSPICIOUS. The skill’s stated purpose matches its behavior as a router, but its main footprint is transitive delegation to external skills/agents distributed through mixed-trust channels. Risk comes from the trust chain and third-party registry/install ecosystem, not from direct credential theft or overtly malicious behavior in this skill.