design-debt-audit

SUSPICIOUS: the skill's stated design-audit purpose is plausible, but this artifact is primarily a transitive installer stub rather than the audit logic itself. The install method uses an official CLI and is not overtly malicious, yet delegating to a third-party full skill creates a meaningful trust-chain risk and makes the actual capability footprint unverifiable from this stub alone.