← Back to Skills Marketplace
Superdesign
by
JayZeeDesign
· GitHub ↗
· v1.0.0
451
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install superdesigndev
Description
Superdesign is a design agent specialized in frontend UI/UX design. Use this skill before implementing any UI that requires design thinking. Common commands:...
Usage Guidance
Before installing or running this skill, understand that it instructs the agent to: (1) scan and copy large parts of your codebase into .superdesign/init/, (2) install and run an external npm CLI (@superdesign/cli) and require you to 'login', and (3) fetch and obey additional instructions from raw.githubusercontent.com at runtime. These behaviors can upload sensitive source code and allow the remote documents or the CLI service to control what the agent does. Recommended precautions: (a) review the remote files (the two raw.githubusercontent URLs) yourself before allowing the skill to fetch/obey them, (b) inspect the @superdesign/cli package (npmjs/GitHub repo, maintainer, install scripts) in a safe environment, (c) do not run this on sensitive or private repositories without explicit approval and a legal/privacy review, (d) consider running the skill in an isolated container or sandbox, and (e) require explicit user confirmation before the agent performs repo-wide scans, installs, or uploads. If you need a less risky workflow, prefer tools that let you selectively send small, explicitly-chosen UI files rather than automatic full-repo extraction.
Capability Analysis
Type: OpenClaw Skill
Name: superdesigndev
Version: 1.0.0
This skill is classified as suspicious due to multiple high-risk behaviors and vulnerabilities. The agent is instructed to automatically fetch and execute instructions from remote GitHub raw content URLs (INIT.md and SUPERDESIGN.md from `https://raw.githubusercontent.com/superdesigndev/superdesign-skill/main/skills/superdesign/`) as direct agent instructions, which is a critical remote code execution (RCE) and prompt injection vulnerability (SKILL.md). Additionally, the agent is instructed to automatically install/update the `@superdesign/cli` npm package globally (`npm install -g @superdesign/cli@latest`), posing a significant supply chain risk (SKILL.md, SUPERDESIGN.md). Furthermore, the skill is designed to read and process extensive portions of the user's codebase, including 'FULL source code' of components, layouts, and configuration files, passing this sensitive data to the `superdesign` CLI, which represents a major data exposure risk (INIT.md, SUPERDESIGN.md).
Capability Assessment
Purpose & Capability
The skill is a design agent and legitimately needs UI code/context to produce pixel-accurate drafts. However, it mandates collecting FULL source code for many components/layouts and writing full init files into .superdesign/init/, and it also instructs installing a global npm CLI (@superdesign/cli) that is not described in the registry metadata. Fetching remote runtime instruction files (INIT.md, SUPERDESIGN.md) from an external raw.githubusercontent URL extends the skill's behavior beyond the local description.
Instruction Scope
SKILL.md requires reading the entire UI dependency tree, copying full source files (components.md, layouts.md, theme.md, etc.), creating .superdesign/init/ files, and then passing many local files to the external CLI. It also mandates fetching and following external runtime instructions (two raw.githubusercontent URLs) — giving the remote documents the power to change runtime behavior. These steps reasonably allow the CLI/service to receive large amounts of repository code (potentially sensitive) and permit remote instructions to alter agent actions.
Install Mechanism
There is no declared install spec in the registry, but SKILL.md instructs the agent to run `npm install -g @superdesign/cli@latest` if the CLI is missing. Installing an unsigned/undeclared global npm package at runtime is a moderate-to-high risk vector (unknown package provenance, post-install scripts, etc.). The skill does not document verifying the package source or provide alternative vetted install methods.
Credentials
The skill declares no required environment variables or credentials, but it requires the user/agent to run `superdesign login` and to ensure the CLI is logged in before use. That login step will create credentials/tokens (not declared or scoped here) and is necessary for the CLI to communicate with its backend. The lack of declared envs/tokens is not strictly inconsistent, but it means authentication will be interactive and the user should understand what account/service will receive uploaded context.
Persistence & Privilege
The skill does not request always-on or system-wide privileges and is user-invocable only. Its operations involve creating/reading files under the project (.superdesign/init/) which is expected for a repo-scanning design tool. It does not attempt to modify other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install superdesigndev - After installation, invoke the skill by name or use
/superdesigndev - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Superdesign skill:
- Renamed from "frontend-design" to "superdesign" with a new focus on procedural UI/UX design agent workflows.
- Adds strict repo analysis via superdesign init, requiring automated creation and population of `.superdesign/init/` context files before any design task.
- Enforces step-by-step CLI usage, including installation and authentication checks before any superdesign command runs.
- Documents supported CLI commands and usage patterns for managing projects, drafts, components, and design iterations.
- Requires fetching and following remote guideline files (INIT.md, SUPERDESIGN.md) for always up-to-date instructions.
Metadata
Frequently Asked Questions
What is Superdesign?
Superdesign is a design agent specialized in frontend UI/UX design. Use this skill before implementing any UI that requires design thinking. Common commands:... It is an AI Agent Skill for Claude Code / OpenClaw, with 451 downloads so far.
How do I install Superdesign?
Run "/install superdesigndev" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Superdesign free?
Yes, Superdesign is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Superdesign support?
Superdesign is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Superdesign?
It is built and maintained by JayZeeDesign (@jayzeedesign); the current version is v1.0.0.
More Skills