site-generation

SUSPICIOUS: the core React/Vite site-generation guidance is coherent, and the main package installs are from official ecosystems. The main concern is scope creep: it instructs transitive installation of extra Vercel agent skills, expanding trust and possible data exposure beyond what is necessary to build a website. Overall this looks more like a legitimate but risky developer skill than malware.