Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ui Ux Pro Max 0.1.0

v0.1.0

UI/UX design intelligence and implementation guidance for building polished interfaces. Use when the user asks for UI design, UX flows, information architect...

0· 337·22 current·22 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (UI/UX design + implementation) matches the included assets (colors, icons, patterns, design guidance) and the presence of helper scripts for generating design tokens. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md explicitly directs the agent to read bundled CSV/markdown reference files and optionally run skills/ui-ux-pro-max/scripts/design_system.py. That is within the stated purpose (generate tokens/output). However, running the bundled Python script will execute code from the skill bundle — the instructions do not mention any need to read system files or network resources, but the script itself could.
Install Mechanism
No install spec — the skill is instruction-only. This minimizes installation risk. The only runtime action the skill recommends is invoking a local python3 script that is bundled with the skill.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is appropriate for a design/implementation guidance skill.
Persistence & Privilege
always:false and no special privileges requested. The skill does not request permanent inclusion or modification of other skills or system-wide settings.
Assessment
This skill appears coherent for UI/UX work: it bundles design data and a Python script to generate tokens. The main risk is executing bundled code from an unknown source. Before running the script (python3 skills/ui-ux-pro-max/scripts/design_system.py): 1) Review the script's source for network access (requests/urllib/socket), subprocess/os calls, or filesystem access outside the skill folder. 2) If you can't review, run it in an isolated environment (ephemeral VM or container) with no access to sensitive files/credentials. 3) Avoid supplying real secrets or production config to the skill. 4) Prefer having the agent produce outputs by reading the CSV/MD files (safe, inspectable) rather than executing unknown code. If you want, I can summarize or statically analyze the scripts for network/file operations before you run them.

Like a lobster shell, security has layers — review code before you run it.

latestvk978nj03j3zjanpntfrhwtjkh5821d6m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Follow these steps to deliver high-quality UI/UX output with minimal back-and-forth.

1) Triage

Ask only what you must to avoid wrong work:

  • Target platform: web / iOS / Android / desktop
  • Stack (if code changes): React/Next/Vue/Svelte, CSS/Tailwind, component library
  • Goal and constraints: conversion, speed, brand vibe, accessibility level (WCAG AA?)
  • What you have: screenshot, Figma, repo, URL, user journey

If the user says "全部都要" (design + UX + code + design system), treat it as four deliverables and ship in that order.

2) Produce Deliverables (pick what fits)

Always be concrete: name components, states, spacing, typography, and interactions.

  • UI concept + layout: Provide a clear visual direction, grid, typography, color system, key screens/sections.
  • UX flow: Map the user journey, critical paths, error/empty/loading states, edge cases.
  • Design system: Tokens (color/typography/spacing/radius/shadow), component rules, accessibility notes.
  • Implementation plan: Exact file-level edits, component breakdown, and acceptance criteria.

3) Use Bundled Assets

This skill bundles data you can cite for inspiration/standards.

  • Design intelligence data: Read from skills/ui-ux-pro-max/assets/data/ when you need palettes, patterns, or UI/UX heuristics.
  • Upstream reference: If you need more phrasing/examples, consult skills/ui-ux-pro-max/references/upstream-skill-content.md.

4) Optional Script (Design System Generator)

If you need to quickly generate tokens and page-specific overrides, use the bundled script:

python3 skills/ui-ux-pro-max/scripts/design_system.py --help

Prefer running it when the user wants a structured token output (ASCII-friendly).

Output Standards

  • Default to ASCII-only tokens/variables unless the project already uses Unicode.
  • Include: spacing scale, type scale, 2-3 font pair options, color tokens, component states.
  • Always cover: empty/loading/error, keyboard navigation, focus states, contrast.

Files

56 total
Select a file
Select a file to preview.

Comments

Loading comments…