antfu-design — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited antfu-design (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this when building interfaces with UnoCSS in any framework (React, Vue, Svelte, Solid, or plain HTML), from dense devtools panels to landing pages. Read core-design-read first to set the direction, then apply the token system plus the polish and anti-slop rules.
bg-base, border-base, color-active, btn-action) instead of raw utility chains in markup.z-top-nav, z-panel-content, z-drawer-content). Do not use raw z values in templates.class="..."). Avoid Attributify syntax in generated code.// @unocss-include when needed).font-mono + tabular-nums for technical values (paths, SHAs, counters, timestamps, percentages).title.A minimal semantic core. See core-starter-kit for the full uno.config.ts and base styles.
shortcuts: [
{
'color-base': 'color-neutral-800 dark:color-neutral-200',
'bg-base': 'bg-white dark:bg-#111',
'bg-secondary': 'bg-#eee dark:bg-#222',
'border-base': 'border-#8882',
'bg-active': 'bg-#8881',
'color-active': 'color-primary-600 dark:color-primary-300',
'border-active': 'border-primary-600/25 dark:border-primary-400/25',
'btn-action': 'inline-flex items-center gap-2 rounded border border-base px2 py1 op75 hover:op100 hover:bg-active disabled:pointer-events-none disabled:op30!',
'op-fade': 'op65 dark:op55',
'op-mute': 'op30 dark:op25',
'z-top-nav': 'z-60',
'z-panel-content': 'z-70',
'z-drawer-content': 'z-100',
},
]| Topic | Description | Reference |
|---|---|---|
| Core Principles | Semantic tokens, dark mode parity, z-index naming, class-first output | core-principles |
| Starter Kit | Copy-paste UnoCSS starter config and base light/dark styles | core-starter-kit |
| Tokens and Combos | Token families, reusable class combinations, mobile-safe shell tokens | core-tokens-and-combinations |
| Design Read and Dials | Read the brief, declare a design read, set variance/motion/density dials | core-design-read |
| Topic | Description | Reference |
|---|---|---|
| Strict Rules and Pre-Flight | Do/don't checklist and the consolidated pre-flight | best-practices-strict-rules |
| Class over Attributify | Why generated code uses class utilities, with conversions | best-practices-class-utilities-over-attributify |
| Anti-Slop Hygiene | The dash ban and the AI-tell forbidden patterns | best-practices-anti-slop |
| Bias Correction | Typography, color, layout, and materiality defaults to override | best-practices-bias-correction |
| Topic | Description | Reference |
|---|---|---|
| Data Presentation | Paths, icons, time, date, numbers, badges, buttons | features-data-presentation |
| Micro-Interactions | Radius, alignment, shadows, animation, numbers, outlines, hit areas | features-micro-interactions |
| Floating Vue Overrides | Shared Floating Vue setup and popper styling | features-floating-vue-overrides |
| Topic | Description | Reference |
|---|---|---|
| Pattern Vocabulary | Named UI patterns to recognize and reach for | advanced-pattern-vocabulary |
| Redesign Protocol | Detect mode, audit first, preserve IA and SEO | advanced-redesign-protocol |
<!-- Source references:
-->
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.