ux-audit

SUSPICIOUS: the core auditing/prototyping purpose is coherent, but the skill is broader than necessary because it auto-installs tooling, executes many shell commands on untrusted URLs, and can publish results to GitHub. Main concerns are indirect prompt-injection exposure from fetched web content and medium supply-chain/runtime trust from installing shot-scraper and its browser dependencies.