A local UI/UX rule library with a retrieval script: the agent uses a Python script to query styles, color palettes, font pairings, UX rules, and implementation patterns for various tech stacks based on the product type, assembling a design system that can be saved as MASTER.md in the project for subsequent pages to reuse.
skills.sh installations 419230 (+2438 / 24h)
Security Audit: Risk warnings present
- The agent executes shell/script commands
- References an unscanned script: scripts/search.py
- Audit scope: GitHub nextlevelbuilder/ui-ux-pro-max-skill/.claude/skills/ui-ux-pro-max/SKILL.md (only the SKILL.md text was scanned)
Rationale
- The author claims the library contains 79 styles (50 active), 192 product color palettes, 74 font pairings, 119 UX rules, and 22 tech stacks; troubleshooting is prioritized across 10 categories such as accessibility, touch targets, and performance
- --design-system aggregates a complete solution; the three 1–10 knobs --variance / --motion / --density adjust layout boldness, motion complexity, and spacing density respectively, with --motion including GSAP snippets
- --persist writes to design-system/<project>/MASTER.md and page override files under pages/; if MASTER.md already exists, it is not overwritten by default, and --force requires explicit user consent
- When retrieving 0 results, it is required to explicitly state that built-in defaults were used, rather than presenting them as retrieved data
- skills.sh installations: 2438 in the last 24 hours, cumulative total 419230 (indicating attention level only)
Usage
- npx skills add https://github.com/nextlevelbuilder/ui-ux-pro-max-skill --skill ui-ux-pro-max; the README also provides a Claude Code plugin, as well as methods such as npm install -g ui-ux-pro-max-cli followed by uipro init --ai claude
- Requires Python 3, with no third-party dependencies; for new pages, first run search.py "<product type> <industry> <keywords>" --design-system, then add --domain or --stack for detailed queries as needed
Risks
- The shell execution noted in the audit aligns with its purpose, but scripts/search.py itself has not been scanned; SKILL.md states it does not install packages or modify the system
- --persist writes files into the project; you must specify --output-dir pointing to the project root, otherwise files are written to the directory where the script is executed
- The rule library consists of general recommendations curated by the author; a high number of entries does not imply suitability for your specific product