design-consultation

SUSPICIOUS: the skill’s stated purpose is benign, but the actual footprint is broader than a simple design-consultation guide because it requires cloning and executing the full gstack toolkit and modifying Claude settings. Evidence suggests the installer is same-publisher and documented rather than deceptive, so this is not confirmed malware, but the unpinned GitHub clone + local setup execution make it a medium security risk.