Variant Design Skill

This skill appears to be what it claims: a design-variation generator using included references. Two practical cautions before installing/using it: 1) Codebase scanning: the skill explicitly says it will scan your project for colors, fonts, components, and README/brand docs if you don't provide context. Only allow this when you want the agent to access those files (e.g., in a project workspace). If you have sensitive code or secrets in the repository, do not allow an untrusted agent to scan it. 2) Review outputs before committing: the skill writes/export outputs (HTML/React, tokens). Inspect generated files for accidental inclusion of any secret strings or file contents you did not expect. The skill does not request external endpoints or credentials, but generated files could contain inferred brand text or data from your project. No install or credentials are required, so the main decision is whether you are comfortable granting the agent read-access to the project files it may scan to infer brand/context. If you want stricter limits, provide the design context manually rather than granting repo access.