Design System Components

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only UI component pattern skill, with the only notable issue being a user-run install command that pulls from an unpinned GitHub path.

This skill appears safe for its stated purpose as UI component guidance. If you install it using the README command, verify the GitHub source first or use a reviewed/pinned source instead.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Running the README install command could install whatever is currently at that external GitHub path.

Why it was flagged

The README documents a user-run installation command that fetches from an external GitHub path on the main branch. This is not automatic runtime behavior, but users should verify the repository and source before running it.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/design-systems/design-system-components

Recommendation

Prefer the reviewed registry artifact or verify/pin the GitHub source before using the npx installation command.