ai-design-check@0.16.3
VERIFIED· install onlyPublisher claims: "Finds and fixes what makes AI-built interfaces look generated, on the web and in SwiftUI, Jetpack Compose, Flutter and React Native apps: 147 design rules, a zero-dependency checker with mechanical fixes, a running-page scanner, a design system generator " Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher enmera · publishing for 17 daysInstalls 14,722Last detonated 6d ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 80/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
LOW
Collapsed <details> block carrying instructionsREADME.tr.md:444 · Collapsed <details> block carrying instructions · informational: not an instruction file
AST01<summary><strong>Kural ekleme</strong></summary> Kurallar [`rules.json`](rules.json) içinde: `id`, `area`, `severity`, `en` ve `tr` altında `title`, `rule`, `whFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.LOW
Collapsed <details> block carrying instructionsREADME.md:437 · Collapsed <details> block carrying instructions · informational: not an instruction file
AST01<summary><strong>Adding a rule</strong></summary> Rules live in [`rules.json`](rules.json): `id`, `area`, `severity`, and `title`, `rule`, `why` and `fix` in `eFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
npx invocation of non-well-known packagebin/ai-design-check.js:14 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-check [path …] Check the projectFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/ai-design-check.js:15 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-check inventory [path …] Count how many ways buttons, inputs, headings, badges and cards are writtenFix: Pin versions and sources; vendor anything fetched at install time.LOW
Collapsed <details> block carrying instructionsREADME.ja.md:298 · Collapsed <details> block carrying instructions · informational: not an instruction file
AST01<summary><strong>ルールを追加する</strong></summary> ルールは [`rules.json`](rules.json) にあります：`id`、`area`、`severity`、そして `en` と `tr` の `title`、`rule`、`why`、`fix`、さらに任意の `cFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
npx invocation of non-well-known packagebin/ai-design-check.js:16 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-check rules [--tr] List the rulesFix: Pin versions and sources; vendor anything fetched at install time.HIGH
Access to sensitive file pathssrc/redesign/study.js:528 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05- Do not create or change files git ignores (.env, build output, caches, node_modules): they stay out of the commit and cannot be put back.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathssrc/redesign/run.js:272 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05- Do not create or change files git ignores (.env, build output, caches, node_modules): they stay out of the commit and cannot be put back.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
npx invocation of non-well-known packagebin/ai-design-check.js:17 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-check init Write ${CONFIG_FILE} with the defaultsFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/story.js:430 · npx invocation of non-well-known package — may execute untrusted code
AST06ctx.fillText('npx @enmera/ai-design-check', X, Y + H + 68);Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
File type combined with upload actionbin/ai-design-check.js:539 · File type combined with upload action — agent may exfiltrate local data files
AST07? `\nNo changes made. Edit ${result.out}/brief.json if you like, then: npx @enmera/ai-design-check redesign ${input} --brief ${result.out}/brief.json`Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packageskills/design-fix/SKILL.md:132 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-check narrow path/to/page.html --width 320 --stressFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/design/SKILL.md:51 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-checkFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/design-fix/SKILL.md:38 · npx invocation of non-well-known package — may execute untrusted code
AST063. Take the mechanical part off the list first: `npx @enmera/ai-design-check path/to/screen.tsx --fix` moves spacing andFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/redesign/run.js:1257 · npx invocation of non-well-known package — may execute untrusted code
AST06export function comparePage(out, passes, { title = 'Redesign', applyWith = 'npx @enmera/ai-design-check redesign apply' } = {}) {Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/design/SKILL.md:19 · npx invocation of non-well-known package — may execute untrusted code
AST065. Run `npx @enmera/ai-design-check inventory` once: it shows the looks that already exist for buttons, inputs,Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/redesign/run.js:957 · npx invocation of non-well-known package — may execute untrusted code
AST06if (patch) log(` its work is in ${shown(`${prefix}.rejected.patch`)}; to apply it anyway: npx @enmera/ai-design-check redesign apply ${shown(`${prefix}.rejected.patch`)}`);Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/design-fix/SKILL.md:78 · npx invocation of non-well-known package — may execute untrusted code
AST06…o colour variables), generate them from the brief instead of inventing values: `npx @enmera/ai-design-check system --character <calm|precise|friendly|warm|bold|editorial|luxurious|playful…Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/ai-design-check.js:18 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-check hook For agent hooks: check the file named in the hook JSON on stdinFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/design-fix/SKILL.md:42 · npx invocation of non-well-known package — may execute untrusted code
AST064. If the page runs, `npx @enmera/ai-design-check scan <url>` reports what only a browser sees: real contrast, tiny text, whatFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/story.js:444 · npx invocation of non-well-known package — may execute untrusted code
AST06ctx.fillText('npx @enmera/ai-design-check', ${SIZE / 2}, 660);Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/design-fix/SKILL.md:35 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @enmera/ai-design-check path/to/screen.tsx --jsonFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageskills/design/SKILL.md:12 · npx invocation of non-well-known package — may execute untrusted code
AST061. Read `RULES.md` from this package (Turkish: `RULES.tr.md`), or run `npx @enmera/ai-design-check rules`.Fix: Pin versions and sources; vendor anything fetched at install time.LOW
Prompt injectionRULES.tr.md:403 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01### Ortak bileşene dışarıdan görünüm verilmezFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionrules.json:969 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01"tr": "Ortak bileşene dışarıdan görünüm verilmez"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionRULES.tr.md:533 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01**Neden:** Yan yana iki dolu düğme, kullanıcıdan sayfanın ne için olduğunu anlamadan seçim yapmasını ister.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionREADME.tr.md:86 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01| Bileşenler | Düğme ve form öğeleri ortak bileşenden, dışarıdan biçim yok, tekrarlanan kod bileşene dönüşür |Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionrules.json:2672 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01"tr": "Yan yana iki dolu düğme, kullanıcıdan sayfanın ne için olduğunu anlamadan seçim yapmasını ister."Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.LOW
Prompt injectionREADME.tr.md:229 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01korunacaklar), ekranı en zararlıdan başlayarak elden geçirir, önce ve sonrayı bildirir. Sayıyı düşürmek için içerik silmez,Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
npx invocation of non-well-known packagesrc/story.js:563 · npx invocation of non-well-known package — may execute untrusted code
AST06ctx.fillStyle = '#eef0f5'; ctx.font = '500 34px ' + MONO; ctx.fillText('npx @enmera/ai-design-check', ${SIZE / 2}, 660);Fix: Pin versions and sources; vendor anything fetched at install time.LOW
Prompt injectionrules.json:977 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01"tr": "Dışarıdan verilen görünüm bileşenin gizli bir kopyasıdır: aynı düğme iki ekranda farklı görünür; tasarım sistemi tam da bunu engellemek için vardır."Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
npx invocation of non-well-known packagesrc/system.js:35 · npx invocation of non-well-known package — may execute untrusted code
AST06if (!found) throw new Error(`Unknown font: ${name}. See: npx @enmera/ai-design-check fonts`);Fix: Pin versions and sources; vendor anything fetched at install time.LOW
Prompt injectionRULES.tr.md:409 · Prompt injection — known jailbreak technique reference · informational: not an instruction file · informational: not an instruction file
AST01**Neden:** Dışarıdan verilen görünüm bileşenin gizli bir kopyasıdır: aynı düğme iki ekranda farklı görünür; tasarım sistemi tam da bunu engellemek için vardır.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
npx invocation of non-well-known packagesrc/story.js:554 · npx invocation of non-well-known package — may execute untrusted code
AST06ctx.fillStyle = '#eef0f5'; ctx.font = '500 30px ' + MONO; ctx.fillText('npx @enmera/ai-design-check', X, Y + H + 68);Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈4,309 tok
2 files · 42 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
No advisories in OSV for @enmera/ai-design-check@0.16.3 as of 6d ago. This is the package itself, not its dependencies.