modern-frontend-design

SUSPICIOUS. The core content is a benign frontend design guide, and its capabilities align with that purpose. The main risk is the embedded transitive install instruction (`npx skills add ...`), which uses an official CLI but still asks the agent to fetch and trust additional remote skill content from GitHub; that install-trust exposure is unnecessary for a pure design-reference skill. No credential harvesting, exfiltration, or malicious data flows are present.