ui-ux-pro-max
No security findings. Scanned 1 time, most recently 2026-02-07.
Second scanner: NVIDIA SkillSpector
The two scanners disagree: Cisco found nothing and SkillSpector says do not install. One of them has a blind spot here; read the skill before trusting either. How the two scanners compare across the whole corpus: Two scanners, one corpus.
What this skill does
UI/UX design intelligence and implementation guidance for building polished interfaces. Use when the user asks for UI design, UX flows, information architecture, visual style direction, design systems/tokens, component specs, copy/microcopy, accessibility, or to generate/critique/refine frontend UI (HTML/CSS/JS, React, Next.js, Vue, Svelte, Tailwind). Includes workflows for (1) generating new UI layouts and styling, (2) improving existing UI/UX, (3) producing design-system tokens and component guidelines, and (4) turning UX recommendations into concrete code changes.
- Package
- 55 files, 938 KB
- SKILL.md
- 267 words, 5 sections
- Code
- Python (4)
SKILL.md covers: 1) Triage · 2) Produce Deliverables (pick what fits) · 3) Use Bundled Assets · 4) Optional Script (Design System Generator) · Output Standards
Findings
No findings. SAFE
What is in the package
55 files, 938 KB. Show the list.
| File | Kind | Size |
|---|---|---|
SKILL.md | doc | 2.6 KB |
data/charts.csv | data | 7.5 KB |
data/colors.csv | data | 9.5 KB |
data/icons.csv | data | 13 KB |
data/landing.csv | data | 14 KB |
data/products.csv | data | 29 KB |
data/react-performance.csv | data | 14 KB |
data/styles.csv | data | 94 KB |
data/typography.csv | data | 31 KB |
data/ui-reasoning.csv | data | 30 KB |
data/ux-guidelines.csv | data | 18 KB |
data/web-interface.csv | data | 7.3 KB |
references/upstream-README.md | doc | 23 KB |
references/upstream-skill-content.md | doc | 9.8 KB |
scripts/__init__.py | script | 0 B |
scripts/core.py | script | 10.0 KB |
scripts/design_system.py | script | 43 KB |
scripts/search.py | script | 5.3 KB |
assets/data/charts.csv | data | 7.5 KB |
assets/data/colors.csv | data | 9.5 KB |
assets/data/icons.csv | data | 13 KB |
assets/data/landing.csv | data | 14 KB |
assets/data/products.csv | data | 29 KB |
assets/data/react-performance.csv | data | 14 KB |
assets/data/styles.csv | data | 94 KB |
assets/data/typography.csv | data | 31 KB |
assets/data/ui-reasoning.csv | data | 30 KB |
assets/data/ux-guidelines.csv | data | 18 KB |
assets/data/web-interface.csv | data | 7.3 KB |
data/stacks/astro.csv | data | 12 KB |
data/stacks/flutter.csv | data | 10 KB |
data/stacks/html-tailwind.csv | data | 11 KB |
data/stacks/jetpack-compose.csv | data | 8.0 KB |
data/stacks/nextjs.csv | data | 12 KB |
data/stacks/nuxt-ui.csv | data | 14 KB |
data/stacks/nuxtjs.csv | data | 16 KB |
data/stacks/react-native.csv | data | 9.8 KB |
data/stacks/react.csv | data | 13 KB |
data/stacks/shadcn.csv | data | 16 KB |
data/stacks/svelte.csv | data | 11 KB |
data/stacks/swiftui.csv | data | 11 KB |
data/stacks/vue.csv | data | 11 KB |
assets/data/stacks/astro.csv | data | 12 KB |
assets/data/stacks/flutter.csv | data | 10 KB |
assets/data/stacks/html-tailwind.csv | data | 11 KB |
assets/data/stacks/jetpack-compose.csv | data | 8.0 KB |
assets/data/stacks/nextjs.csv | data | 12 KB |
assets/data/stacks/nuxt-ui.csv | data | 14 KB |
assets/data/stacks/nuxtjs.csv | data | 16 KB |
assets/data/stacks/react-native.csv | data | 9.8 KB |
assets/data/stacks/react.csv | data | 13 KB |
assets/data/stacks/shadcn.csv | data | 16 KB |
assets/data/stacks/svelte.csv | data | 11 KB |
assets/data/stacks/swiftui.csv | data | 11 KB |
assets/data/stacks/vue.csv | data | 11 KB |
External hosts referenced
nuxt.com fonts.google.com fonts.googleapis.com ui.shadcn.com ui.nuxt.com nextjs.org react.dev tailwindcss.com docs.astro.build developer.android.com svelte.dev vuejs.org developer.apple.com api.flutter.dev reactnative.dev img.shields.io kit.svelte.dev github.com docs.expo.dev docs.flutter.dev docs.swmansion.com pinia.vuejs.org pub.dev reactnavigation.org router.vuejs.org testing-library.com callstack.github.io dart.dev paypal.me riverpod.dev
Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.
Environment variables referenced
DATABASE_URL API_SECRET NUXT_PUBLIC_API_BASE
Package contents recorded 2026-10-22. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.
What we checked
- Static analyzer. Pattern rules over SKILL.md and bundled files: known-bad commands, exfiltration URLs, secrets, obfuscation.
- Llm analyzer. A language model reads the skill and reports intent-level issues the rules cannot express.
- Meta analyzer. A second model pass that validates, deduplicates and re-scores the other analyzers' findings.
What we did not check
- Runtime behaviour. The skill was not executed; findings come from reading its files.
- Anything fetched at install or run time, including remote scripts, package dependencies, and URLs the skill tells the agent to open.
- Content the analyzers cannot read: images, binaries, and some non-English text.
- Known scanner bypass classes. See the methodology and limitations page.
Sources
- Repository: https://clawhub.ai/skills/ui-ux-pro-max
- Raw scan result: ui-ux-pro-max-scan.json
- Badge for your README:
- Request a re-scan