ui-template-author

SUSPICIOUS. The skill’s core capabilities and file access are largely coherent with UI template authoring, and the docs explicitly constrain source handling and local validation. The main risk is transitive trust: it instructs installation of another skill from a personal GitHub repo through the skills CLI, extending agent permissions to unreviewed external instructions without strong publisher verification.