Publish Skill Final

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI05: Unexpected Code Execution

What this means

Running the command executes local code and changes a project file.

Why it was flagged

The skill documents running a local Python helper. This is disclosed and directly related to applying UI design rules, but it is still local code execution that users should choose intentionally.

Skill content

python3 $WORKSPACE/skills/ui-designer-skill/scripts/apply_ui_rules.py --style ... --palette ...

Recommendation

Run the helper only from the project where you want design rules applied, and review the script or resulting .cursorrules change if you are unsure.

NoteHigh Confidence

ASI06: Memory and Context Poisoning

What this means

Future AI sessions in the project may follow these design preferences automatically.

Why it was flagged

The helper appends or creates .cursorrules, a persistent instruction file that may influence future AI behavior in the project.

Skill content

rules_file = ".cursorrules"
mode = "a" if os.path.exists(rules_file) else "w"
...
f.write(rules_to_add)

Recommendation

Inspect .cursorrules after running the helper, keep a backup if needed, and remove the added section if you no longer want those design instructions.