docs-site-macos

SUSPICIOUS. The core capabilities mostly fit a docs-site builder, but the skill has medium security risk from broad command execution, unpinned npm/Playwright install paths, and especially the vendored compressed blob that is decompressed and evaled in-browser. Data flow stays local and there is no clear credential harvesting or off-purpose exfiltration, so this is not confirmed malware.