ux-design

The visible skill content is purpose-aligned and contains no direct exfiltration, credential handling, or execution logic. Risk is driven mainly by the unresolved trust of the required `sage` runtime and the bundle's transitive loading of other skills; overall this is best classified as suspicious due to supply-chain uncertainty, not malicious behavior.