Frontend Design

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only frontend design skill with no code or credential access; the only item to notice is an optional unpinned README install command.

This appears safe as an instruction-only design guide. Before installing via the README’s external npx/GitHub command, verify the source or use the reviewed registry install path instead.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user chooses that install route, they may execute or fetch content from a moving external source rather than only using the reviewed registry artifact.

Why it was flagged

The README offers a user-run install command that fetches from an unpinned GitHub branch via npx. This is disclosed setup documentation rather than automatic execution, but users should verify the repository and package source before running it.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/frontend/frontend-design

Recommendation

Prefer the reviewed registry install path when possible, or verify and pin the external GitHub source before running the README command.