ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ui Ux Pro Max

v0.1.0

UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 9 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient. Integrations: shadcn/ui MCP for component search and examples.

⭐ 9· 3.3k·15 current·15 all-time
by@ahump20
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill claims a rich UI/UX 'design intelligence' with searchable databases, a CLI script, persistence, and integrations (shadcn/ui MCP), but the bundle contains no code, no database, and no homepage/source. The described capabilities would legitimately require shipped scripts, data files (e.g., ui-reasoning.csv), or an integration config — none are present.
!
Instruction Scope
SKILL.md directs the agent to run local Python scripts (python3 skills/ui-ux-pro-max/scripts/search.py), create and persist files under design-system/, and read data like ui-reasoning.csv. Those runtime actions require local files and filesystem write access; because no code/data are bundled, the instructions are not self-contained and give the agent broad discretion to read/write paths that aren't validated or declared.
!
Install Mechanism
There is no install spec even though the instructions expect a CLI implemented in the skill directory. The README suggests installing Python via OS package manager if missing — that's reasonable — but there is no mechanism to install the actual skill scripts. This mismatch means either the skill is incomplete or expects out-of-band installation from an unknown source.
ℹ
Credentials
The skill requests no environment variables or credentials, which is proportionate. However it references integrations (shadcn/ui MCP) and parallel 'domain' searches without explaining network endpoints or required tokens; missing details could hide additional credential needs later.
ℹ
Persistence & Privilege
The skill is not always-enabled and does not request special platform privileges, but its workflow explicitly instructs persisting a design-system directory and files across sessions. That means it will write to the agent workspace or repo if implemented — a normal capability for a design tool but worth noting since the bundle lacks the code that would perform those writes.
What to consider before installing
This skill's documentation expects local Python scripts and data (e.g., skills/ui-ux-pro-max/scripts/search.py, ui-reasoning.csv) but the published package contains only SKILL.md. Do not install or grant it automated access yet. Ask the publisher for: (1) the missing code and data files or a canonical install method (GitHub release, package, or pip/npm artifact), (2) the exact network endpoints and any credentials needed for 'shadcn/ui MCP' integration, and (3) a source/homepage and author identity. If you must try it, run any referenced scripts manually in an isolated environment (local sandbox or VM), verify what files they write, and inspect their code before allowing automated or persistent agent invocation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97578ytzkfz7vdaqz4gtate4h80d9by

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments