design-taste

SUSPICIOUS. The main skill behavior is a benign design-review guide, but it contains built-in telemetry that reads a locally configured endpoint and sends metadata off-host. That outbound flow is not proportionate to the core design-taste purpose and lacks endpoint verification, though it does not forward explicit credentials or install third-party code.