surge-landing

SUSPICIOUS. The skill’s stated purpose is benign, but it relies on an undocumented, publicly unverifiable executable Python module (`surge_agent.uiux`) to perform its core workflow. That dependency is disproportionate to a markdown design helper and creates high install/execution trust risk, though there is no direct evidence of credential theft or confirmed malicious behavior in the skill text itself.