Windcraft Cli — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Windcraft Cli (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Design coherence layer for AI-assisted code generation. Cursor, Claude Code, and friends write the code — windcraft keeps every page speaking the same design language by checking generated UI against your design tokens.
Runs free and local — no account, no cloud, no API key.
# scaffold tokens + config from a bundled starter theme (offline)
npx windcraft init --local
# scan your code against those tokens (exits non-zero on violations → CI gate)
npx windcraft checkThis is the open-source CLI, static analyzer, and MCP server:
get_design_tokens, get_design_rules, validate_component_code).claude mcp add windcraft -- npx windcraft mcpinit also writes a Claude skill to .claude/skills/windcraft.md.
windcraft.io adds a shared, editable design system for teams: hosted catalog of component contracts and page patterns, token sync across repos, version history, and org-wide enforcement. The local CLI never sends your source code.
MIT. Independent and unaffiliated with the companies whose names inspired the bundled theme presets — see TRADEMARKS.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.