📦

brand

Name: brand
Author: nextlevelbuilder

v1.0.0 Revisión del contenido r1 Riesgo medio 📁 Acceso al sistema de archivos🌐 Acceso a red⚡ Contiene scripts⚙️ Comandos externos

Build consistent brand guidelines and assets

Brand work can become inconsistent across content, assets, and interfaces. This skill provides structured guidance, validation, and token synchronization to keep brand decisions aligned.

Compatible con: Claude Codex Code(CC)

📊 74 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "brand" from https://skillstore.io/skills/nextlevelbuilder-brand.md and its manifest at https://skillstore.io/api/skills/nextlevelbuilder-brand/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/nextlevelbuilder-brand.md Manifest firmado GET /api/skills/nextlevelbuilder-brand/manifest Lockfile firmado GET /api/skills/nextlevelbuilder-brand/lockfile

Pruébalo

Usando "brand". Create a voice guide for a reliable payroll service.

Resultado esperado:

Personality: clear, dependable, and helpful.
Tone: direct and reassuring.
Avoid: exaggerated claims and unexplained jargon.

Usando "brand". Review an image asset for brand compliance.

Resultado esperado:

Filename follows the campaign naming pattern.
PNG format and file size meet the defined limits.
Register the asset in the local manifest before approval.

Usando "brand". Define primary and accent colors for a product interface.

Resultado esperado:

Primary color: a clear blue for key actions.
Accent color: a contrasting green for success states.
Document accessible contrast checks before release.

Auditoría de seguridad

Riesgo medio

v1 • 11/9/2026 Abrir el informe versionado

Most static detections are false positives caused by JavaScript template literals, regular expressions, documentation, and expected local file operations. One generated ImageMagick command can be unsafe to paste when an image filename is hostile. The prompt-context generator also requires reviewed guideline inputs because it emits their content as prompt-ready instructions.

Archivos escaneados

3,340

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio

scripts/inject-brand-context.cjs:268-304 scripts/inject-brand-context.cjs:313-345

Untrusted guidelines can become prompt instructions

The context generator inserts extracted guideline fields, including a base prompt and style keywords, into prompt-ready output. A malicious or unreviewed guidelines file can therefore introduce instruction-like content into downstream AI prompts.

The generator accepts a caller-selected local guidelines path and directly interpolates extracted content into a prompt addition. This is intended functionality, but it establishes a clear trust boundary.

Elementos de revisión de capacidades (1)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Medio

scripts/extract-colors.cjs:168

Ruby/shell backtick execution

return `magick "${imagePath}" -colors ${numColors} -depth 8 -format "%c" histogram:info:`;

The script emits an ImageMagick shell command with an unescaped image path inside double quotes. A hostile filename can execute shell substitutions if a user copies and runs the displayed command.

Factores de riesgo

📁 Acceso al sistema de archivos (29)

🌐 Acceso a red (4)

references/typography-specifications.md:22 references/typography-specifications.md:23 templates/brand-guidelines-starter.md:86 templates/brand-guidelines-starter.md:87

⚡ Contiene scripts (1)

scripts/extract-colors.cjs:84

⚙️ Comandos externos (50)

Auditado por: claude

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/nextlevelbuilder-brand/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/nextlevelbuilder-brand/security.svg)](https://skillstore.io/skills/nextlevelbuilder-brand?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/nextlevelbuilder-brand?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nextlevelbuilder-brand/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/nextlevelbuilder-brand.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

nextlevelbuilder. (2026). brand security audit report (audit version 1) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/nextlevelbuilder-brand/audits/1

Cita BibTeX

@techreport{nextlevelbuilder-nextlevelbuilder-brand-2026,
  author = {nextlevelbuilder},
  title = {brand security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/nextlevelbuilder-brand/audits/1},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "brand security audit report (audit version 1)"
version: "1.0.0"
type: report
authors:
  - name: "nextlevelbuilder"
date-released: "2026-09-11"
url: "https://skillstore.io/skills/nextlevelbuilder-brand/audits/1"
identifiers:
  - type: other
    value: "skillstore:nextlevelbuilder-brand:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Define a new brand voice

Create a clear voice framework and messaging guidance for a new product launch.

Review campaign assets

Check local asset names, formats, sizes, and registration before campaign delivery.

Align interface tokens

Transfer documented brand colors into local design tokens for a product interface.

Prueba estos prompts

Create a brand voice

Create a concise brand voice guide for [brand]. Include personality, tone, preferred language, and prohibited terms.

Draft brand guidelines

Create brand guidelines for [brand] using [audience], [mission], [colors], and [typefaces]. Include visual and messaging standards.

Review brand consistency

Review these campaign materials against our brand guidelines. List inconsistencies, explain each issue, and recommend precise corrections.

Update design tokens

Update our brand guidelines with these color decisions, then prepare the local design-token synchronization workflow. Use a dry run first.

Mejores prácticas

Keep one reviewed brand-guidelines file as the source of truth.
Run token synchronization with a dry run before writing project files.
Review generated brand content with the responsible brand owner.

Evitar

Do not treat generated messaging as legal or trademark advice.
Do not paste suggested shell commands for filenames you do not trust.
Do not overwrite design tokens without reviewing the proposed changes.

Preguntas frecuentes

What does this skill help with?

It supports brand voice, visual identity, messaging, asset standards, and token workflows.

Which tools can use this skill?

The package declares support for Claude, Codex, and Claude Code.

Does it analyze image pixels directly?

No. It prepares color comparison guidance and can use a separate image-analysis tool.

Can it update design tokens?

Yes. Its sync script updates local token files from documented brand colors.

Does asset validation modify files?

No. The validator reports issues and filename suggestions without renaming assets.

Should I trust injected brand context automatically?

Use only reviewed guidelines files because their content is included in prompt-ready output.

Detalles del desarrollador

Autor

nextlevelbuilder

Licencia

MIT

Versión del autor

v1.0.0

Revisión de Skillstore

Repositorio

https://github.com/nextlevelbuilder/ui-ux-pro-max-skill/tree/7f69fed6a2717900085f1bc3b263721f8ba025e2/.claude/skills/brand

Ref.

ab32f1e771b01001f924c38df083d099af94056e

Actualidad del mantenimiento

11/9/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📁 references/

📄 approval-checklist.md

📄 asset-organization.md

📄 brand-guideline-template.md

📄 color-palette-management.md

📄 consistency-checklist.md

📄 logo-usage-rules.md

📄 messaging-framework.md

📄 typography-specifications.md

📄 update.md

📄 visual-identity.md

📄 voice-framework.md

📁 scripts/

📄 extract-colors.cjs

📄 inject-brand-context.cjs

📄 sync-brand-to-tokens.cjs

📁 tests/

📄 test_sync_brand_to_tokens.py

📄 validate-asset.cjs

📄 SKILL.md

📁 templates/

📄 brand-guidelines-starter.md