superdesign-skill

SUSPICIOUS: the skill’s stated purpose is coherent with using a design CLI and hosted design service, and the install sources appear plausibly same-org and registry-based rather than overtly malicious. However, this stub mainly installs other code (full skill plus CLI), creating transitive trust and external credential/context handling outside the visible skill, so the overall risk is medium rather than benign.