design-auditor

SUSPICIOUS: the stub’s stated purpose is a design audit, but its actual behavior is mainly transitive installation of another skill from a third-party personal GitHub repo via npx. The install path uses an official CLI pattern, which lowers malware confidence, but the downstream skill is not independently reviewed here and would inherit agent permissions, making this a medium security risk.