ui-craft

This stub is mostly a loader/redirector for a separate remote skill rather than a standalone design skill. The main risk is transitive installation of external skill content with agent privileges; suspicious enough for medium risk, but there is no direct evidence of malware, credential theft, or exfiltration in the stub itself.