design-prim

SUSPICIOUS: the stated purpose is coherent for a UI redesign orchestrator, but the skill’s footprint depends heavily on transitive installation and execution of multiple external skills/tools, several without strong official provenance in the provided evidence. No confirmed credential theft, stealth, or malicious exfiltration is shown in this wrapper, so this is not malware, but the supply-chain and delegated-permission risk are substantial.