huashu-design

SUSPICIOUS. The stub is not overtly malicious, and its install source appears consistent with official Skills CLI documentation and a real downstream repo. However, its primary behavior is transitive skill installation via remote code/package fetch, which expands trust to external code and the downstream skill; this makes it medium risk despite no direct credential harvesting or secret exfiltration in the stub itself.