ryux-critique

SUSPICIOUS rather than malicious: the skill’s purpose and core capabilities mostly align with UI critique, but it expands trust to external MCP/CLI tooling, includes some unverifiable RYUX dependencies, and relies on procedural read-only limits rather than hard enforcement. No clear credential theft or covert exfiltration is shown, so this is a medium security-risk workflow integration, not confirmed malware.