← 返回 Skills 市场
Sloth D2C Skills
作者
Cherokeeli
· GitHub ↗
· v1.0.1
· MIT-0
237
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install sloth-d2c-skills
功能描述
将Figma设计稿转换为前端组件代码（Design to Code）。通过MCP工具获取设计稿数据，分片处理并生成最终代码。当用户提到Figma转代码、设计稿转代码、D2C、design to code、生成页面时使用。
安全使用建议
This skill appears to do what it says (convert Figma design data into code) but has worrisome operational details you should review before installing: 1) The package includes a background subagent (enabledAutoRun) with file-reading tools — confirm how/when that agent runs and restrict its file access (prefer limiting to the .sloth path). 2) The subagent's 'do not read other files' rule is an instruction, not an enforced sandbox; verify runtime enforcement or disable the subagent auto-run. 3) The SKILL.md references an MCP Token/403 errors but doesn't declare where to supply credentials — ask the maintainer which token is needed and why. 4) Troubleshooting suggests installing an npm package (sloth-d2c-mcp) of unknown origin — do not run that install without vetting the package source. If you need to use this skill, prefer running it in an isolated sandbox, inspect/disable the background agent, and verify the MCP tool and any npm package provenance first.
功能分析
Type: OpenClaw Skill
Name: sloth-d2c-skills
Version: 1.0.1
The skill bundle implements a Figma-to-code (D2C) workflow using a dedicated MCP tool (#d2c_figma) and sub-agents for parallel processing. The logic is consistent with the stated purpose, and the sub-agent (sloth-d2c-agent.md) includes explicit security constraints such as being restricted from writing to the filesystem or using other skills. While it suggests installing a global NPM package (sloth-d2c-mcp) as a troubleshooting step, this is a standard practice for CLI-based developer tools and does not show evidence of malicious intent.
能力评估
Purpose & Capability
The skill's name and description (Design-to-Code using an MCP #d2c_figma tool) align with the runtime instructions: call an MCP tool, process chunks, aggregate, and generate code. No unrelated credentials or binaries are requested by the skill itself.
Instruction Scope
The SKILL.md asks the main agent to call the #d2c_figma MCP Tool and to write final code into the project — reasonable. However, the included sloth-d2c-agent config declares read_file/search tools and enables background, agentic behavior while also stating 'absolute prohibitions' (do not read other files, do not edit project files). Those prohibitions are only instructions, not enforced restrictions. The agent tools as declared could read arbitrary files accessible to the agent if not programmatically constrained. There's also a mismatch: subagents are said to be used for processing but are forbidden from using MCP/Skills, while the main flow requires MCP.
Install Mechanism
The skill is instruction-only (no install spec) which is low-risk. SKILL.md includes troubleshooting commands that suggest installing an npm package (npm install -g sloth-d2c-mcp) if a CLI is missing — that references an external package of unknown provenance and could be risky if followed without vetting.
Credentials
The skill declares no required environment variables or credentials, which is coherent. But error handling references '未配置有效 Token' (403) without specifying which token or where it should be provided. Lack of explicit auth declarations makes it unclear what credentials the MCP Tool needs.
Persistence & Privilege
The bundled sloth-d2c-agent has enabled: true and enabledAutoRun: true and is_background: true. That implies an agent the platform may auto-run in the background with file-reading tools, increasing persistence and potential attack surface even though the skill's top-level flags (always: false) are normal. This persistent/autonomous subagent combined with broad read tools is a notable risk.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sloth-d2c-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/sloth-d2c-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- 新增 sloth-d2c-agent 相关文档文件 sloth-d2c-agent.md。
- 当前功能未变，仅补充了说明文件。
v1.0.0
Initial release of Figma design-to-code skill.
- Enables conversion of Figma design files to frontend component code using MCP tool integration.
- Supports core workflow: MCP execution, parallel code chunk processing, and final code generation.
- Validates required parameters (`fileKey`, `nodeId`) before execution.
- Includes detailed error handling and troubleshooting for common issues.
- Provides optional parameters for customization (e.g., depth, framework selection).
元数据
常见问题
Sloth D2C Skills 是什么？
将Figma设计稿转换为前端组件代码（Design to Code）。通过MCP工具获取设计稿数据，分片处理并生成最终代码。当用户提到Figma转代码、设计稿转代码、D2C、design to code、生成页面时使用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 237 次。
如何安装 Sloth D2C Skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sloth-d2c-skills」即可一键安装，无需额外配置。
Sloth D2C Skills 是免费的吗？
是的，Sloth D2C Skills 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Sloth D2C Skills 支持哪些平台？
Sloth D2C Skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Sloth D2C Skills？
由 Cherokeeli（@cherokeeli）开发并维护，当前版本 v1.0.1。
推荐 Skills