arch-design

SUSPICIOUS: the skill’s stated purpose is coherent, but it depends on transitive installation/loading of an unreviewed companion skill from a differently named publisher/repo and combines external research with file-writing authority. No direct credential theft or exfiltration is evident, so this is a medium-risk trust/scope issue rather than confirmed malware.