prism-ui

SUSPICIOUS: the skill’s stated UI-building purpose mostly matches its file access and coding actions, but it introduces an external `prism_agent.uiux` dependency whose provenance is not verifiably same-org, and it mixes untrusted web-derived guidance with Bash and write capabilities. This looks more like medium supply-chain and prompt-injection risk than confirmed malicious behavior.