Skills brand-landingpage
๐Ÿ“ฆ

brand-landingpage

Content revision r1 High Risk โš™๏ธ External commands๐ŸŒ Network access

Create Brand-Led Landing Pages

Many product teams need a polished landing page before they have clear brand direction. This skill guides discovery, creates a Stitch design system, iterates designs, and delivers deployable HTML.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "brand-landingpage" from https://skillstore.io/skills/wshobson-brand-landingpage.md and its manifest at https://skillstore.io/api/skills/wshobson-brand-landingpage/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "brand-landingpage". A founder asks for a landing page for a new developer API.

Expected outcome:

The assistant asks focused brand questions, builds a technical design direction, generates a desktop page, and opens it for review.

Using "brand-landingpage". A maintainer provides a README and asks for a project homepage.

Expected outcome:

The assistant extracts product details, asks for CTA and brand feel, creates variants, and packages the approved static page.

Using "brand-landingpage". A team likes the layout but dislikes the colors.

Expected outcome:

The assistant keeps the layout, creates color-focused alternatives, asks for a preferred direction, and saves the selected version.

Security Audit

High Risk
v5 โ€ข 7/7/2026 Open versioned report

Most static alerts are false positives from Markdown code spans around file names, Stitch tool names, and documentation links. Confirmed issues are limited to host-affecting actions: opening HTML with OS commands, creating a zip through zip -r, and checking an API key environment variable. No prompt injection attempt or data exfiltration intent was found.

4
Files scanned
841
Lines analyzed
3
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Environment file access
3. Verify the API key env var (as named in the docs) is set. If the key is missing, have the user ge
Line 33 instructs the agent to verify an API key environment variable and references .env setup. It says not to echo the key, but the workflow still touches secret-bearing configuration.
Medium
Implicit Global Package Installation
The skill instructs the agent to install the Stitch SDK if missing, with global install as the default. Automatic global package installation can modify the host environment and execute package lifecycle scripts.
Line 32 explicitly says to install the SDK and prefer a global install by default. The setup purpose is legitimate, so this is a host-modification risk rather than evidence of malicious intent.
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Windows cmd.exe
6. **Open the saved HTML file in the user's browser** so they can see the design at full fidelity. U
Line 168 explicitly permits Windows browser launch through cmd /c start. That uses a command shell and can be risky if any local path is not validated or quoted correctly.
Medium
Ruby/shell backtick execution
6. **Open the saved HTML file in the user's browser** so they can see the design at full fidelity. U
Line 168 instructs the agent to run OS-specific commands such as open, xdg-open, or start to launch a local HTML file. This is legitimate preview behavior, but it still executes host commands and requires path validation.
Medium
Ruby/shell backtick execution
6. Create the zip: `zip -r "{project-name}-landing-page.zip" "{project-name}-landing-page/"`
Line 241 tells the agent to invoke zip -r to create the delivery bundle. The placeholders are quoted, but this is still external command execution using a project-derived name.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/wshobson-brand-landingpage/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/wshobson-brand-landingpage/security.svg)](https://skillstore.io/skills/wshobson-brand-landingpage?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/wshobson-brand-landingpage?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wshobson-brand-landingpage/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/wshobson-brand-landingpage.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

wshobson. (2026). brand-landingpage security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wshobson-brand-landingpage/audits/5

BibTeX citation

@techreport{wshobson-wshobson-brand-landingpage-2026, author = {wshobson}, title = {brand-landingpage security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/wshobson-brand-landingpage/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "brand-landingpage security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "wshobson" date-released: "2026-07-07" url: "https://skillstore.io/skills/wshobson-brand-landingpage/audits/5" identifiers: - type: other value: "skillstore:wshobson-brand-landingpage:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
87
Content
67
Community
83
Spec Compliance

What You Can Build

Launch a SaaS Homepage

Turn a product idea, audience, CTA, and brand preferences into a first landing page draft.

Present an Open Source Project

Create a clear project page with a hero, feature sections, setup flow, and GitHub-focused CTA.

Refine a Developer Tool Brand

Convert technical positioning into visual direction, then iterate page variants from structured feedback.

Try These Prompts

Start a Landing Page
Create a landing page for my product. Start by interviewing me about the audience, CTA, brand feel, colors, typography, and shape direction.
Use Existing Context
Use the product notes I provide to extract the project name, pitch, audience, and features. Ask only the missing brand and CTA questions.
Iterate a Draft
Open the latest generated landing page and help me review message clarity, CTA visibility, color fit, reading flow, and credibility.
Package for Handoff
After I approve the final layout, package the landing page with HTML, design notes, color tokens, saved assets, and a deployment checklist.

Best Practices

  • Share the project name, target users, and primary CTA before generation starts.
  • Provide three brand adjectives and one site you admire when possible.
  • Review browser previews and fix message clarity before tuning small visual details.

Avoid

  • Using this skill for dashboards, full applications, documentation sites, or component-level UI work.
  • Skipping the brand interview and expecting a specific visual identity from little context.
  • Treating generated static HTML as production app logic without engineering review.

Frequently Asked Questions

What does this skill create?
It creates brand-guided landing page drafts with Stitch, then packages approved static HTML and design notes.
Does it need Stitch access?
Yes. It expects the Stitch SDK or MCP tools and a configured Stitch API key.
Can it build a full website?
No. It is designed for a single landing page or homepage, not a multi-page site.
Can it use my logo or screenshots?
It can save provided assets for handoff and reflect your description, but Stitch does not directly upload images.
What happens after the first draft?
It opens the page for review, asks structured feedback questions, and turns feedback into edits or variants.
What files are delivered?
The bundle can include final HTML, optional mobile HTML, design documentation, color tokens, assets, and a deployment checklist.

Developer Details

Author

wshobson

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

36e07d5e13068e5be64447e8f20b427cf2cbd21a

Maintenance freshness

7/18/2026

Usage

12 downloads ยท 29 views

File structure

More from wshobson

View all
View all