design-qa-review-skill

SUSPICIOUS. The stated design-QA purpose is plausible, and most capabilities fit it, but install trust is weak: the skill is branded as ara.so while sourcing from an unrelated personal GitHub repo with unclear release provenance. Data flows to screenshot/Figma services are expected, yet the arbitrary screenshot endpoint and weak publisher linkage make the overall skill medium-high risk rather than benign.