v1.0.0

Design System Components

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:32 AM.

Analysis

This is an instruction-only UI component pattern skill, with the only notable issue being a user-run install command that pulls from an unpinned GitHub path.

GuidanceThis skill appears safe for its stated purpose as UI component guidance. If you install it using the README command, verify the GitHub source first or use a reviewed/pinned source instead.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

README.md

npx add https://github.com/wpank/ai/tree/main/skills/design-systems/design-system-components

The README documents a user-run installation command that fetches from an external GitHub path on the main branch. This is not automatic runtime behavior, but users should verify the repository and source before running it.

User impactRunning the README install command could install whatever is currently at that external GitHub path.

RecommendationPrefer the reviewed registry artifact or verify/pin the GitHub source before using the npx installation command.