Theme Factory

PassAudited by ClawScan on May 1, 2026.

Overview

Theme Factory is an instruction-only theme library with no code, credentials, or hidden data access; the only notable item is a user-directed GitHub-based install command.

This skill appears safe and purpose-aligned for applying visual themes. Before installing, confirm that the GitHub source in the README is one you trust, especially if installing it globally for use across projects.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the user installs from that GitHub path, they are trusting the remote repository content to be added as an agent skill.

Why it was flagged

The README suggests a user-directed install from a GitHub path while the registry metadata lists the source as unknown and provides no homepage. This is not suspicious by itself, but it is a provenance detail users should notice before installing.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/design-systems/theme-factory

Recommendation

Verify the repository and contents before installing, and prefer a trusted or pinned source when available.