bmad-agent-ux-designer

SUSPICIOUS: the visible external dependency (`uv`) appears legitimate and same-org official, so supply-chain risk is low-to-moderate. The main concern is scope: a UX persona skill also executes project-defined scripts and activation steps, trusting local config and file globs that could perform arbitrary actions or expose project data. No explicit credential harvesting, remote exfiltration endpoint, or confirmed malware behavior is shown.