logo-design-guide

SUSPICIOUS: the core purpose is coherent, but the trust chain is heavier than a simple design guide should need. Same-org evidence lowers the likelihood of outright malware, yet the inconsistent `belt-sh/cli` install reference, transitive skill installs, broad Bash capability, and credentialed external CLI keep risk at medium.