designer-skills-collection

SUSPICIOUS. The skill is purpose-aligned and uses same-org distribution, with no clear credential theft or exfiltration behavior. However, its core behavior is installing other skills/plugins, creating a transitive trust chain, and the Gemini workflow uses unpinned GitHub clone/copy installs without stronger release verification.