claude-design-studio-ui-generator

SUSPICIOUS. The stated UI-generation purpose matches the broad API-key usage and local file outputs, but install trust is weak: naming/publisher inconsistencies and transitive plugin/skill installation create disproportionate supply-chain risk. No confirmed malware or credential theft is shown, yet the skill’s actual trust footprint is broader and less verifiable than its documentation suggests.