plan-design-review

SUSPICIOUS. The skill’s purpose mostly matches its behavior, but it is a thin installer-pointer that requires trusting and executing the full gstack repo, which adds broader tooling, Chromium, hooks, update checks, and optional external review flows. Same-org provenance lowers concern versus a random third party, but the unpinned clone-and-run install and transitive trust keep risk at medium.