ui-capture

SUSPICIOUS. The skill’s browsing, DOM/CSS inspection, screenshots, recordings, and local artifact generation all fit its stated UI-capture purpose, and data mostly stays local. The main concern is install trust: it directs users to a same-repo but unpinned raw GitHub installer executed by shell, which is a meaningful supply-chain risk. No strong evidence of credential theft, unrelated exfiltration, or hidden malicious behavior was found.