swiftui-design-consultation

SUSPICIOUS. The skill’s capabilities mostly match its SwiftUI design-system purpose, and data flows stay local or within expected same-suite MCP/skill tooling. Main concerns are supply-chain and execution trust: it runs mutable local helper/plugin code, uses eval on helper output, chains to additional skills, and can commit changes autonomously. No credential harvesting or off-platform exfiltration is evident, but the footprint is broader than a pure documentation skill.