UI/UX Pro Max

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: ui-ux-pro-max Version: 0.1.0 The skill bundle is designed for UI/UX design intelligence and implementation guidance. The Python scripts (`core.py`, `design_system.py`, `search.py`) perform text searches on bundled CSV data and generate structured markdown design system files. While the `design_system.py` script can write files (`MASTER.md`, `pages/*.md`) to the current working directory or a specified output directory, this functionality is aligned with the stated purpose of 'persisting design system' and does not exhibit path traversal vulnerabilities due to `pathlib.Path` usage and basic sanitization. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found. Markdown instructions in `SKILL.md` and `references/upstream-skill-content.md` guide the AI agent to use the Python scripts for their intended purpose without attempting to subvert the agent's behavior.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the optional helper is run, bundled Python code executes locally to support design-system output.

Why it was flagged

The skill documents an optional local Python script for generating design-system tokens. This is aligned with the skill purpose, but it is still local code execution a user should notice.

Skill content
python3 skills/ui-ux-pro-max/scripts/design_system.py --help
Recommendation

Use the script only when you want structured token generation, and review the generated output before applying it to a project.

What this means

Users have less external context for who authored the bundled guidance and helper files.

Why it was flagged

The package lacks a public source or homepage reference. This is a provenance gap, but the provided artifacts and static scan do not show suspicious behavior.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing from trusted publishers, and treat the optional script as third-party local code.