gemini-designer

SUSPICIOUS. The skill’s design-assistant purpose is plausible, but its actual footprint routes user prompts, local files, screenshots, and credentials through a third-party ZenMux gateway instead of a direct official Gemini API path, and it silently installs a global CLI when missing. That combination is internally risky and only partially proportionate to the stated purpose.