Skills/ClawHub/design-to-code

design-to-code@1.0.0

VERIFIED· install only

Publisher claims: "将 TRAE design 模式的设计稿、UI 截图、Figma 链接或手绘草图转换为可直接运行的本地应用代码。支持解析设计结构、提取样式参数、生成多端响应式代码、处理资源文件，并输出可立即启动的完整项目。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher jainwong · publishing for 141 daysInstalls 438Last detonated 2d ago
$clawhub install design-to-code
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 83/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsSKILL.md:140 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **后端配置**：数据库连接字符串、JWT Secret、CORS 白名单、环境变量 `.env.example`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:207 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- SQLite 文件路径配置在 `.env` 中，确保项目迁移时数据库不丢失Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:234 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files3. **环境变量模板** — `.env.example` 文件，列出所有必需的环境变量及说明Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:205 · npx invocation of non-well-known package — may execute untrusted code- 提供数据库初始化脚本（`prisma migrate dev` / `npx prisma db seed` / SQL 执行）Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:255 · npx invocation of non-well-known package — may execute untrusted codenpx prisma db seedFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:254 · npx invocation of non-well-known package — may execute untrusted codenpx prisma migrate devFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsSKILL.md:250 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescp .env.example .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈3,120 tok
1 file · 3 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

design-to-code@1.0.0 safety verdict: Verified (install only) — KillerSkills