memoire-design-tooling

SUSPICIOUS: the core design-audit purpose broadly matches the capabilities, and the npm install path is plausible, but the skill overreaches by instructing transitive skill installation and broad agent-kit setup. Main risk is trust expansion rather than confirmed malware or credential theft.