docx-design-agent

SUSPICIOUS: the main document-editing behavior is coherent and proportionate, and the direct Python dependencies come from normal registries. The elevated risk comes from the skill-to-skill installation/invocation pattern and optional routing of image generation through a reverse-engineered, non-official Gemini web skill that may rely on browser auth/cookies rather than an official API.