swiftui-design

SUSPICIOUS: this catalogue skill is lightweight and not directly malicious, but its main purpose is to route the agent toward installing an unreviewed upstream skill from a personal GitHub repo. The risk is primarily transitive trust and supply-chain exposure, not direct credential theft or exfiltration in this wrapper.