mastepanoski-skills

SUSPICIOUS: the stub is broadly coherent with its stated purpose as a catalogue/installer for UX/UI audit skills, and there is no evidence of credential harvesting or malicious pre-execution. The main concern is transitive trust: it instructs the agent to fetch and install remote skills from a personal GitHub repository, so the security footprint is larger than a simple documentation stub and depends on unreviewed downstream skill content.