Skills gemdesign-skill

📦

gemdesign-skill

Name: gemdesign-skill
Author: gemdesign-ai

v0.1.1 Content revision r1 High Risk 📁 Filesystem access⚙️ External commands🌐 Network access

Design GemDesign Prototype Pages

Turning requirements into consistent, interactive prototypes can take significant design and engineering time. This skill converts page requirements into validated GemDesign prototypes with local preview and platform synchronization.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "gemdesign-skill" from https://skillstore.io/skills/gemdesign-ai-gemdesign-skill.md and its manifest at https://skillstore.io/api/skills/gemdesign-ai-gemdesign-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/gemdesign-ai-gemdesign-skill.md Signed manifest GET /api/skills/gemdesign-ai-gemdesign-skill/manifest Signed lockfile GET /api/skills/gemdesign-ai-gemdesign-skill/lockfile

Test it

Using "gemdesign-skill". Create a desktop admin dashboard for tracking customer support tickets with a dark navy header and clear status states.

Expected outcome:

A structured dashboard prototype with navigation, ticket metrics, filtering controls, status treatments, and a validated interaction plan.

Using "gemdesign-skill". Turn this shopping app brief into home, product list, product detail, and checkout pages.

Expected outcome:

A page plan with four linked prototype screens
A shared visual direction for the app
Validation notes for navigation and interactive states

Using "gemdesign-skill". Update the existing product detail page to add an image gallery and an expandable specifications section.

Expected outcome:

An updated page proposal that preserves the existing style, adds the requested interactions, and reports validation results before synchronization.

Security Audit

High Risk

v1 • 8/7/2026 Open versioned report

All 368 static pattern hits are false positives because they occur in Markdown paths, code examples, documented URLs, or intended CLI workflow text rather than bundled executable code. The skill still has high-risk semantic concerns: authority-like prompt control language and instructions to collect an API token before automatically running authentication. Publication should remain blocked or require manual security review until those workflows are revised.

Files scanned

865

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:22 SKILL.md:74 SKILL.md:109-111 SKILL.md:524

Prompt Injection Attempt Detected

The skill uses authority-like control language such as "MUST be executed strictly in order," "HARD GATE," and "NON-NEGOTIABLE" to constrain agent behavior and require tool use. These instructions are untrusted skill content and could override normal agent judgment or user intent.

The file repeatedly presents workflow directives as hard gates and non-negotiable requirements, including mandatory browser and user-interaction behavior. This is direct evidence of instruction-layer manipulation, although the stated product workflow may be legitimate.

High

SKILL.md:54-67

Sensitive API Token Collection

The login workflow tells the agent to ask the user for an API token and then automatically run the authentication command with the supplied token. This creates a high-impact credential-handling and side-effect path that should remain under explicit user control.

The instructions explicitly request a secret and prescribe executing a login command with that secret. The destination may be the intended GemDesign CLI, but the skill does not establish secure secret handling or consent boundaries.

Risk Factors

📁 Filesystem access (7)

README.md:33 README.md:48 README.md:30 README.md:28 README.md:30 SKILL.md:98 SKILL.md:98

⚙️ External commands (50)

🌐 Network access (23)

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/gemdesign-ai-gemdesign-skill/security.svg)](https://skillstore.io/skills/gemdesign-ai-gemdesign-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/gemdesign-ai-gemdesign-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gemdesign-ai-gemdesign-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/gemdesign-ai-gemdesign-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

gemdesign-ai. (2026). gemdesign-skill security audit report (audit version 1) [Author version 0.1.1]. Skillstore. https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1

BibTeX citation

@techreport{gemdesign-ai-gemdesign-ai-gemdesign-skill-2026,
  author = {gemdesign-ai},
  title = {gemdesign-skill security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1},
  note = {Author version 0.1.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gemdesign-skill security audit report (audit version 1)"
version: "0.1.1"
type: report
authors:
  - name: "gemdesign-ai"
date-released: "2026-08-07"
url: "https://skillstore.io/skills/gemdesign-ai-gemdesign-skill/audits/1"
identifiers:
  - type: other
    value: "skillstore:gemdesign-ai-gemdesign-skill:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Turn a PRD into a prototype set

Convert a product requirements document into a page list, shared visual direction, and interactive prototype set for review.

Explore interface directions

Generate a page or design-system reference, inspect it in the local preview, and refine the visual direction before handoff.

Prepare validated page files

Retrieve existing GemDesign pages, apply structured changes, validate interaction rules, and synchronize approved files.

Try These Prompts

Create one page

Create a GemDesign prototype for a [page type]. Include these sections: [sections]. Use this visual direction: [style].

Map a product brief

Read this product brief and propose the required prototype pages. For each page, provide a readable page name, purpose, key states, and navigation relationships.

Refine an existing page

Retrieve the existing GemDesign page identified by [page ID]. Update [specific sections or interactions] while preserving the current style system. Validate the result and summarize the changes.

Generate a complete flow

Using this requirements document, generate a consistent multi-page GemDesign prototype. Establish a design-system baseline, match the app type, create the pages, validate each page, and list any unresolved requirements.

Best Practices

Describe the target users, page type, required states, and visual direction before generation.
Reuse an existing app and establish shared design rules before creating related pages.
Validate every page before saving it and review local output before synchronization.

Avoid

Do not generate pages before confirming the target app and its page type.
Do not skip validation or save partial files as finished prototypes.
Do not request or paste API tokens into chat when authenticating the CLI.

Frequently Asked Questions

What is GemDesign?

GemDesign is a platform for creating interactive UI prototype pages with a defined page specification and design workflow.

Can this create several pages at once?

Yes. Provide a requirements document and the skill can plan and generate a related set of prototype pages.

Does it support existing pages?

Yes. The workflow can retrieve an existing page, apply requested changes, validate it, and prepare it for saving.

Why is a local preview used?

The local preview helps you inspect incremental page output and interaction behavior before platform synchronization.

What must I provide?

Provide the page goal, required content, important states, target app type, and preferred visual direction.

Does the skill handle authentication?

The CLI requires authentication for platform actions. Authenticate through your own secure credential workflow before using synchronization commands.

Developer Details

Author

gemdesign-ai

License

MIT

Author version

v0.1.1

Skillstore revision

Repository

https://github.com/gemdesign-ai/skills/tree/ca88b50600845bdad3b0147695a84ccd60950a78/gemdesign-skill

Ref

6371cd04c89f5fca412585d1f9bf51e87a4ed3a3

Maintenance freshness

8/8/2026

Usage

0 downloads · 0 views

File structure

📄 README.md

📄 SKILL.md