database-schema-designer

SUSPICIOUS. The available evidence is not enough to call this malicious, but the third-party `npx skillfish add ...` transitive installation model creates meaningful trust and execution risk, especially since the exact `SKILL.md` was not directly inspected and provenance/signature details are incomplete. Purpose appears broadly consistent with database tooling, but install trust is only partially verifiable.