material-3

SUSPICIOUS. The core Material 3 design purpose is mostly coherent, and the remote fetch appears same-publisher and read-only, so this is not strong malware evidence. The main issues are mutable remote instruction content and the unnecessary recommendation to install another skill via `npx skills add`, which creates a transitive trust chain beyond a simple design-system helper.