extract-design-system

SUSPICIOUS: the stub's purpose is coherent, but its main action is to install a separate third-party skill via an unpinned transitive trust chain. No clear credential harvesting or exfiltration is shown here, yet the actual behavior is delegated to unreviewed external skill content, so the risk is medium rather than benign.