designlang-design-extract

SUSPICIOUS: the core website-style extraction behavior matches the stated purpose, and install sources appear consistent with the publisher. Main concerns are transitive skill installation, unpinned npm execution, and forwarding sensitive cookies/headers into third-party CLI code; these are proportionate enough to avoid a malicious classification but keep overall risk elevated.