Skills ui-ux-pro-max

📦

ui-ux-pro-max

Name: ui-ux-pro-max
Author: ZhanlinCui

Content revision r1 Medium Risk ⚡ Contains scripts🌐 Network access📁 Filesystem access🔑 Env variables⚙️ External commands

Design Better Interfaces With UI Guidance

Teams need consistent UI decisions across many frontend stacks. This skill turns product context into practical design systems, UX checks, and implementation guidance.

Supports: Claude Codex Code(CC)

📊 67 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "ui-ux-pro-max" from https://skillstore.io/skills/zhanlincui-ui-ux-pro-max.md and its manifest at https://skillstore.io/api/skills/zhanlincui-ui-ux-pro-max/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/zhanlincui-ui-ux-pro-max.md Signed manifest GET /api/skills/zhanlincui-ui-ux-pro-max/manifest Signed lockfile GET /api/skills/zhanlincui-ui-ux-pro-max/lockfile

Test it

Using "ui-ux-pro-max". A request for a SaaS analytics dashboard in Next.js.

Expected outcome:

A design direction with dashboard layout, restrained palette, readable typography, chart guidance, Next.js performance notes, and accessibility checks.

Using "ui-ux-pro-max". A request to improve a mobile checkout flow.

Expected outcome:

A UX review covering touch targets, form labels, loading states, error feedback, payment trust signals, and platform-specific implementation tips.

Using "ui-ux-pro-max". A request for a luxury portfolio landing page.

Expected outcome:

A style recommendation with imagery priorities, section order, font pairing, color mood, motion guidance, and patterns to avoid.

Security Audit

Medium Risk

v4 • 7/8/2026 Open versioned report

Most static findings are false positives from Markdown formatting, CSV reference rows, documentation URLs, and framework code examples. The real concerns are privileged setup commands in SKILL.md and a persistence feature that writes files using user-derived path components without sufficient validation.

Files scanned

3,254

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

scripts/design_system.py:503-510 scripts/design_system.py:527-530

Unsanitized Design-System Persistence Paths

The persistence function builds output directories and page filenames from project and page names without constraining path traversal characters. A crafted value could write Markdown files outside the intended design-system folder.

The code directly combines Path(output_dir), project_slug, and page-derived filenames before mkdir and open calls. It normalizes spaces but does not reject slashes, dot-dot segments, or absolute path components.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:115

PowerShell invocation

```powershell

SKILL.md introduces a PowerShell setup block for installing Python with winget. This is legitimate setup guidance, but it can modify the host environment if followed automatically.

High

SKILL.md:111

sudo privilege escalation

sudo apt update && sudo apt install python3

SKILL.md includes a prerequisite command that uses sudo to install Python. Running privileged package installation from skill instructions can alter the host system and must require explicit user approval.

Medium

scripts/design_system.py:522

Python file write/append

with open(master_file, 'w', encoding='utf-8') as f:

The persistence helper writes MASTER.md to a path derived from output_dir and a project name. Those path components are not normalized or constrained before file creation.

Medium

scripts/design_system.py:530

Python file write/append

with open(page_file, 'w', encoding='utf-8') as f:

The persistence helper writes a page override file using a page name that is only lowercased and space-normalized. A crafted page value could place files outside the intended pages directory.

Risk Factors

⚡ Contains scripts (10)

data/react-performance.csv:8 data/react-performance.csv:9 data/react-performance.csv:10 data/react-performance.csv:11 data/stacks/nextjs.csv:40 data/stacks/react.csv:37 data/stacks/shadcn.csv:57 data/stacks/vue.csv:34 data/stacks/vue.csv:39 data/ux-guidelines.csv:49

🌐 Network access (451)

📁 Filesystem access (6)

data/stacks/nextjs.csv:35 data/stacks/nuxtjs.csv:6 data/stacks/react-native.csv:9 data/stacks/shadcn.csv:4 scripts/design_system.py:522 scripts/design_system.py:530

🔑 Env variables (10)

data/stacks/nextjs.csv:37 data/stacks/nextjs.csv:37 data/stacks/nextjs.csv:37 data/stacks/nextjs.csv:36 data/stacks/nuxtjs.csv:53 data/stacks/nuxtjs.csv:55 data/stacks/nuxtjs.csv:53 data/stacks/nuxtjs.csv:55 data/stacks/nuxtjs.csv:53 data/stacks/nuxtjs.csv:54

⚙️ External commands (152)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/zhanlincui-ui-ux-pro-max/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhanlincui-ui-ux-pro-max/security.svg)](https://skillstore.io/skills/zhanlincui-ui-ux-pro-max?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhanlincui-ui-ux-pro-max?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-ui-ux-pro-max/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhanlincui-ui-ux-pro-max.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

ZhanlinCui. (2026). ui-ux-pro-max security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhanlincui-ui-ux-pro-max/audits/4

BibTeX citation

@techreport{zhanlincui-zhanlincui-ui-ux-pro-max-2026,
  author = {ZhanlinCui},
  title = {ui-ux-pro-max security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/zhanlincui-ui-ux-pro-max/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ui-ux-pro-max security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "ZhanlinCui"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/zhanlincui-ui-ux-pro-max/audits/4"
identifiers:
  - type: other
    value: "skillstore:zhanlincui-ui-ux-pro-max:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

4 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

nextlevelbuilder Recommended

nextlevelbuilder-ui-ux-pro-max

Skillstore Score 76

Evidence Confidence High

Skillstore usage 162

Updated

2026-09-09

DCjanus

dcjanus-ui-ux-pro-max

Skillstore Score 75

Evidence Confidence High

Skillstore usage 54

Updated

2026-09-09

sickn33

sickn33-ui-ux-pro-max

Skillstore Score 75

Evidence Confidence High

Skillstore usage 29

Updated

2026-09-09

ZhanlinCui Current

zhanlincui-ui-ux-pro-max

Skillstore Score 67

Evidence Confidence High

Skillstore usage 579

Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan a Product Interface

Turn a product brief into a layout pattern, style direction, color palette, typography pair, and UX checklist.

Implement Frontend Screens

Get stack-specific guidance before building pages in React, Next.js, Vue, Svelte, Tailwind, or mobile frameworks.

Review UI Quality

Check accessibility, spacing, responsiveness, motion, forms, charts, and common interaction problems before delivery.

Try These Prompts

Pick a Visual Direction

Use ui-ux-pro-max to recommend a visual direction for a landing page about [product]. Include style, colors, fonts, and sections.

Create a Design System

Use ui-ux-pro-max to generate a design system for [project] in [industry]. Include layout pattern, palette, typography, components, and anti-patterns.

Review an Existing Screen

Use ui-ux-pro-max to review this [stack] screen for accessibility, responsive layout, visual hierarchy, motion, and interaction problems.

Build Stack-Specific Guidance

Use ui-ux-pro-max for [stack] guidance on a [page type]. Combine product, UX, typography, color, chart, and framework recommendations into an implementation plan.

Best Practices

Start with product type, audience, industry, stack, and desired mood before asking for recommendations.
Use the generated design system as guidance, then validate contrast, responsiveness, and interaction states in the actual UI.
Review local file output paths before using persist mode, especially when project or page names come from prompts.

Avoid

Do not treat CSV recommendations as a replacement for testing real screens on target devices.
Do not run setup or persistence commands automatically without checking their effects.
Do not mix many visual styles from search results into one interface without a clear hierarchy.