design-overhaul

SUSPICIOUS. The skill's design-overhaul purpose broadly matches its code-editing and verification actions, and it shows no overt credential theft or external exfiltration. Risk comes from high autonomy: it must run local commands, make broad repo changes, invoke unverified chained skills, and push commits without explicit user confirmation.