Skills design-md

📦

design-md

Name: design-md
Author: google-labs-code

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Create DESIGN.md Guides from Stitch Projects

Design teams need a clear source of truth for consistent AI-generated screens. This skill turns Stitch screens, metadata, and visual assets into a structured DESIGN.md guide.

Supports: Claude Codex Code(CC)

📊 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "design-md" from https://skillstore.io/skills/google-labs-code-design-md.md and its manifest at https://skillstore.io/api/skills/google-labs-code-design-md/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/google-labs-code-design-md.md Signed manifest GET /api/skills/google-labs-code-design-md/manifest Signed lockfile GET /api/skills/google-labs-code-design-md/lockfile

Test it

Using "design-md". Analyze a furniture collection screen.

Expected outcome:

A DESIGN.md section describing a calm, gallery-like visual atmosphere.
A color palette with descriptive names, hex values, and functional roles.
Component guidance for buttons, cards, navigation, forms, and responsive grids.

Using "design-md". Create prompt guidance for future Stitch screens.

Expected outcome:

Recommended design language for future prompts.
Specific rules for spacing, typography, shadows, and interaction states.
Warnings about vague terms and missing color values.

Using "design-md". Summarize a project design theme.

Expected outcome:

A concise project identity section.
Semantic color and typography rules.
Layout principles that explain how the screen should adapt across devices.

Security Audit

Medium Risk

v6 • 7/9/2026 Open versioned report

Static findings for shell execution, reconnaissance, hardcoded URLs, and screen capture upload are false positives caused by markdown examples, Stitch MCP tool references, design terminology, and a public documentation link. The main security concern is semantic: the skill can enumerate owned Stitch projects and retrieve private HTML and screenshots unless the user scopes the project explicitly.

Files scanned

363

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:35-56

Broad Stitch Project Discovery and Asset Retrieval

The skill directs the agent to list owned Stitch projects when no project ID is provided, then fetch screen metadata, HTML code, and optional screenshots. This is intended functionality, but it can expose private project names and design assets unless the user clearly scopes the request.

The instructions explicitly call list_projects, list_screens, get_screen, and web_fetch against design asset URLs. The behavior is legitimate for the skill, but the privacy impact is clear when scope is not explicit.

Risk Factors

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/google-labs-code-design-md/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/google-labs-code-design-md/security.svg)](https://skillstore.io/skills/google-labs-code-design-md?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/google-labs-code-design-md?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/google-labs-code-design-md/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/google-labs-code-design-md.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

google-labs-code. (2026). design-md security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/google-labs-code-design-md/audits/6

BibTeX citation

@techreport{google-labs-code-google-labs-code-design-md-2026,
  author = {google-labs-code},
  title = {design-md security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/google-labs-code-design-md/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "design-md security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "google-labs-code"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/google-labs-code-design-md/audits/6"
identifiers:
  - type: other
    value: "skillstore:google-labs-code-design-md:audit:6"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

sickn33 Recommended

sickn33-design-md

Skillstore Score 78

Evidence Confidence High

Skillstore usage 14

Updated

2026-08-21

google-labs-code Current

google-labs-code-design-md

Skillstore Score 69

Evidence Confidence High

Skillstore usage 12

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Document a product design language

Create a reusable DESIGN.md from an existing Stitch screen so future screens keep the same style.

Standardize AI screen generation

Give Claude, Codex, or Claude Code a precise design reference before asking for new UI screens.

Capture handoff guidance

Summarize colors, typography, spacing, and component behavior for teams that need shared design context.

Try These Prompts

Create a basic DESIGN.md

Use design-md to analyze my Stitch project and create a DESIGN.md file for the main screen.

Analyze a specific screen

Use design-md on project [project ID] and screen [screen ID]. Focus on colors, typography, components, and layout rules.

Build a reusable style guide

Analyze the selected Stitch screen and write a DESIGN.md that future prompts can use to create matching pages.

Produce a detailed design-system reference

Use design-md to retrieve the Stitch screen HTML, screenshot, and project theme. Create a detailed DESIGN.md with atmosphere, tokens, components, layout, and prompt guidance.

Best Practices

Provide the exact Stitch project and screen when possible to avoid broad project discovery.
Review the generated DESIGN.md for brand accuracy before using it as a prompt source.
Use one strong reference screen before expanding the guide with additional screens.

Avoid

Do not ask it to inspect all projects when only one project is relevant.
Do not treat the generated guide as a complete accessibility audit.
Do not use vague prompts when exact project and screen identifiers are available.