vibecoded-design-tells-analysis

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and data flows are straightforward to local scripts plus the documented Arctic Shift API. The main concern is install trust: branding points to ara.so but the executable content comes from a separate personal GitHub repo with unpinned pip installs, which is a disproportionate provenance gap for a skill meant to be installed and run locally.