gemdesign-skill@0.1.11
VERIFIED· install onlyPublisher claims: "Generate, save, and modify GemDesign prototype pages via CLI. Invoke when user wants to create UI prototypes, design pages, or batch-generate pages from requirements." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 90/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
HIGH
Coercive compliance languageSKILL.md:399 · Coercive compliance language
AST01# → Response includes requiredNextSteps — you MUST follow themFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Coercive compliance languageSKILL.md:448 · Coercive compliance language
AST01- **Type matching**: The `pageScene` value determines the page layout you MUST follow. Generate `web` (desktop, wide-screen) pages for `web` apps, `app` (mobile, narrow-screen) pages for `app` apps. DFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
File type combined with upload actionSKILL.md:196 · File type combined with upload action — agent may exfiltrate local data files
AST07> **server workdir** 保存 HTML 工作目录到 `~/.gemdesign/config.json` 的 `htmlWorkdir` 字段。本地服务启动后通过 fileWatcher 监听此目录下的 `.html` 文件变更，并经 SSE 推送到浏览器画布。**`app create` 会在此目录下同步创建项目子目录 `{projectName}__{appuuid}`**，Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Coercive compliance languageSKILL.md:358 · Coercive compliance language
AST01> **The response contains `requiredNextSteps` — you MUST follow them.** After calling `page create`, you MUST write the HTML file and then call `page save`. Do NOT stop after writing HTML.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Coercive compliance languageSKILL.md:570 · Coercive compliance language
AST01- **Type matching**: The `pageScene` value determines the page layout you MUST follow. Generate `web` (desktop, wide-screen) pages for `web` apps, `app` (mobile, narrow-screen) pages for `app` apps. DFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
File type combined with upload actionSKILL.md:277 · File type combined with upload action — agent may exfiltrate local data files
AST07> - `--file ./output/<projectDir>/crm/page.html` → meta.json at `./output/<projectDir>/crm/page.meta.json`Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.CRITICAL
Rule modification attemptSKILL.md:747 · Rule modification attempt — overwriting existing instructions
AST01#### Rule 1: No `vh` unitFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.CRITICAL
Rule modification attemptSKILL.md:751 · Rule modification attempt — overwriting existing instructions
AST01#### Rule 2: HIGHEST-LEVEL RED LINE - ABSOLUTELY NO MarginFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
File type combined with upload actionSKILL.md:278 · File type combined with upload action — agent may exfiltrate local data files
AST07> - `--file ./output/<projectDir>/crm/客户管理/page.html` → meta.json at `./output/<projectDir>/crm/客户管理/page.meta.json`Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Coercive compliance languageSKILL.md:513 · Coercive compliance language
AST01- **Type matching**: The `pageScene` value determines the page layout you MUST follow. Generate `web` (desktop, wide-screen) pages for `web` apps, `app` (mobile, narrow-screen) pages for `app` apps. DFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
File type combined with upload actionSKILL.md:276 · File type combined with upload action — agent may exfiltrate local data files
AST07> - `--file ./output/<projectDir>/page.html` → meta.json at `./output/<projectDir>/page.meta.json`Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.Cost to the agent
Instructions loaded
≈22,703 tok
1 file · 3 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.