extract-design

SUSPICIOUS: The skill’s behavior broadly matches its stated purpose, but it delegates core functionality to a personal third-party npm CLI and processes arbitrary external web content with Bash/Write available. This is more a supply-chain and untrusted-content risk than evidence of malicious intent; no credential requests, exfiltration endpoints, or disproportionate access are present.