← 返回 Skills 市场
1523
总下载
0
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install ui-ux
功能描述
Searchable UI/UX design databases: 50+ styles, 97 palettes, 57 font pairings, 99 UX rules, 25 chart types. CLI generates design systems from natural language. Data-driven complement to ui-design.
安全使用建议
This skill appears to be a locally run Python CLI that uses bundled CSV databases to generate design systems — that matches its description. However before installing or running it you should: 1) Inspect the Python scripts (scripts/search.py, core.py, design_system.py) for any network requests, remote endpoints, or unexpected filesystem access. 2) Confirm the install source/provenance (who published it and whether the GitHub URL in the README is legitimate). 3) Because SKILL.md requires python3 but the registry entry doesn't list python as a required binary, ensure you run the CLI in a controlled environment (virtualenv or container) and not with elevated privileges. 4) If you plan to use the persistence features, be aware the tool will write files under the current project and the README suggests copying files into ~/.ai-skills or other home directories — only do that after manual review. If you cannot review the scripts yourself, run them in an isolated sandbox or ask the publisher for a signed release or source repository to review.
功能分析
Type: OpenClaw Skill
Name: ui-ux
Version: 1.0.0
The skill is generally benign, providing UI/UX design recommendations. However, a significant file write vulnerability exists in `scripts/design_system.py` and `scripts/search.py`. The `--output-dir` CLI argument, which is user-controlled, is directly used to construct the base path for writing `MASTER.md` and page-specific markdown files. This allows an attacker or a prompt-injected agent to attempt to write files to arbitrary directories on the system (e.g., `/etc/design-system/MASTER.md` or `~/.ssh/design-system/MASTER.md`), even though the content written is benign markdown and the filenames are sanitized. This lack of path validation for user-supplied input constitutes a high-risk vulnerability.
能力评估
Purpose & Capability
Name/description, CSV data files, and CLI examples align with a UI/UX design-data + generator tool. However, the skill metadata lists no required binaries while the SKILL.md explicitly requires Python 3 for the CLI — that's an inconsistency. The README also contains 'npx add https://github.com/...' lines (a repo tree URL), which is an odd install hint and should be verified against the registry's actual install mechanism.
Instruction Scope
Runtime instructions direct the agent/user to run python3 scripts/search.py and to persist generated design systems (creating design-system/MASTER.md and a pages/ folder). This is consistent with a CLI tool, but it grants the skill broad discretion to write files under the working directory and read the bundled CSV datasets. The SKILL.md does not instruct network calls, but the included Python scripts could contain network I/O or other operations — the instructions give the skill permission to execute local code without declaring that in metadata.
Install Mechanism
There is no formal install spec in the registry entry, yet the package contains executable scripts and the README shows various install commands (npx clawhub install and an 'npx add https://github.com/...' line). The GitHub URL in README is a repo tree link rather than a clear release archive — this is unusual and worth confirming. Because code files (scripts/*.py) are included and expected to be executed, the absence of a declared install step or verified release artifacts increases the surface for supply-chain risk.
Credentials
The skill requests no environment variables, credentials, or config paths in metadata and the SKILL.md does not ask for secrets. That is appropriate for a local design-data CLI. The only missing piece is that Python 3 is required but not listed under required binaries in registry metadata.
Persistence & Privilege
always:false and no elevated privileges are requested. The skill will persist files into a local design-system/ directory by default, which is within expected scope. However, the skill includes manual install instructions that copy files into dotfile directories (~/.ai-skills, ~/.cursor/skills, .claude/skills), which implies it expects filesystem write access to user home and project directories — normal for a CLI but worth being explicit about.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install ui-ux - 安装完成后，直接呼叫该 Skill 的名称或使用
/ui-ux触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
**Major update: Introduces "UI/UX Pro Max", a searchable, CLI-driven UI/UX design system generator with expanded databases and workflow.**
- Adds over 50 design styles, 97 color palettes, 57 font pairings, 99 UX rules, and 25 chart types for reference.
- Provides a Python-based CLI to generate complete design systems from natural language queries.
- Supports hierarchical project structure and persistent design outputs per project and page.
- Includes priority-based UX/UI rule categories for fast referencing.
- Offers domain-specific search (style, chart, typography, etc.) and stack-specific best practice retrieval.
- Outlines a comprehensive workflow for analyzing requests, generating, and customizing design systems.
元数据
常见问题
UI / UX 是什么？
Searchable UI/UX design databases: 50+ styles, 97 palettes, 57 font pairings, 99 UX rules, 25 chart types. CLI generates design systems from natural language. Data-driven complement to ui-design. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1523 次。
如何安装 UI / UX？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ui-ux」即可一键安装，无需额外配置。
UI / UX 是免费的吗？
是的，UI / UX 完全免费（开源免费），可自由下载、安装和使用。
UI / UX 支持哪些平台？
UI / UX 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 UI / UX？
由 wpank（@wpank）开发并维护，当前版本 v1.0.0。
推荐 Skills