ant-design

SUSPICIOUS: the core Ant Design guidance is mostly coherent and does not request credentials, but the skill reaches outside its local bundle to fetch live instructions from a personal publisher domain and also promotes transitive installation of a broader master skill. This is not strong evidence of malware, but it carries meaningful supply-chain and trust-chain risk disproportionate to a simple design reference.