superdesign

SUSPICIOUS. The stated purpose mostly matches the file access and CLI usage, and the npm install path appears official. The main risk is the mandatory fetch-and-follow of fresh remote markdown instructions from GitHub, which gives unpinned external content ongoing control over agent behavior and repo analysis.