30x-image

SUSPICIOUS: the main image-generation behavior is coherent and uses official OpenAI tooling, but the skill’s footprint extends into npm CLI execution, optional MCP installation, webpage/Figma ingestion, and inconsistent getdesign install references. This looks more like an over-broad workflow skill with medium supply-chain risk than malware.