website-builder-setup-548445 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited website-builder-setup-548445 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user wants to set up, repair, or expand their AI website-building stack for premium marketing sites, SaaS pages, app mockups, motion-heavy UI, Stitch workflows, and design review loops.
| Tool or skill | What it adds |
|---|---|
| UI/UX Pro Max | Design-system prompts, style directions, palettes, type pairings, and UI heuristics. |
| Motion / Framer Motion | Production animation patterns: reveals, transitions, hover/tap feedback, and reduced-motion aware effects. |
| 21st.dev Magic | Component inspiration and generated React UI building blocks. |
| Taste Skill | Stronger visual taste rules for frontend architecture, typography, layout, color, and anti-generic UI. |
| Emil Design Engineering | Micro-interaction polish, animation judgment, component feel, and design-engineering review. |
| Impeccable | Deep UI critique, redesign, polish, UX writing, responsiveness, accessibility, and live iteration workflows. |
| Stitch Skills | Stitch design, code-to-design, design-system extraction, prompt enhancement, and React component workflows. |
$CODEX_HOME\skills when CODEX_HOME is set; otherwise use $HOME\.codex\skills.Run:
node --version
npm --version
python --version
git --versionIf Node.js is missing, stop and ask the user to install the LTS version from https://nodejs.org.
If Python or Git is missing, continue where possible but tell the user which GitHub skill installs may fail.
Run:
npm install -g uipro-cli
uipro init --ai codexFallback if --ai codex is not supported:
uipro init --ai claudeFor Next.js or React projects, prefer the modern Motion package when starting fresh:
npm install motionIf the existing project already uses framer-motion, keep it:
npm install framer-motionAlways check package.json before importing either package.
The user needs a 21st.dev API key from https://21st.dev/magic/console.
For Codex plugin setup, use the available plugin workflow if present. If the user already has the key locally, the command pattern is:
$env:API_KEY="YOUR_21ST_DEV_KEY"
npx -y @21st-dev/magic@latestDo not store or print API keys in project files.
Resolve the built-in skill installer helper:
$codexHome = if ($env:CODEX_HOME) { $env:CODEX_HOME } else { Join-Path $HOME '.codex' }
$skillInstaller = Join-Path $codexHome 'skills\.system\skill-installer\scripts\install-skill-from-github.py'Install the main Taste skill:
python $skillInstaller --repo Leonxlnx/taste-skill --path skills/taste-skillInstall Emil Design Engineering:
python $skillInstaller --repo emilkowalski/skills --path skills/emil-design-engInstall Impeccable:
python $skillInstaller --repo pbakaus/impeccable --path skill --name impeccableInstall Stitch skills:
python $skillInstaller --repo google-labs-code/stitch-skills --path plugins/stitch-design/skills/code-to-design plugins/stitch-design/skills/extract-design-md plugins/stitch-design/skills/extract-static-html plugins/stitch-design/skills/generate-design plugins/stitch-design/skills/manage-design-system plugins/stitch-design/skills/upload-to-stitch plugins/stitch-build/skills/react-components plugins/stitch-build/skills/remotion plugins/stitch-build/skills/shadcn-ui plugins/stitch-utilities/skills/design-md plugins/stitch-utilities/skills/enhance-prompt plugins/stitch-utilities/skills/stitch-loop plugins/stitch-utilities/skills/taste-designIf a destination already exists, do not overwrite it automatically. Report that it is already installed.
For full Stitch plugin integration, add the Stitch marketplace when Codex plugin CLI is available:
codex plugin marketplace add google-labs-code/stitch-skills --ref main --sparse .agents/plugins --sparse plugins/stitch-design --sparse plugins/stitch-build --sparse plugins/stitch-utilitiesStitch workflows require the Stitch MCP server and credentials. Do not claim Stitch is fully ready until the MCP server is visible in the active tools.
Run:
$codexHome = if ($env:CODEX_HOME) { $env:CODEX_HOME } else { Join-Path $HOME '.codex' }
Get-ChildItem (Join-Path $codexHome 'skills') -Directory | Sort-Object Name | Select-Object -ExpandProperty NameExpected important entries:
taste-skillemil-design-engimpeccablecode-to-designgenerate-designmanage-design-systemreact-componentsshadcn-uidesign-mdenhance-promptstitch-looptaste-designWhen finished, summarize what installed, what failed if anything, and say:
Restart Codex to pick up the new skills.
Then the user can ask for premium website work using:
website-builder-setupui-ux-pro-maxtaste-skillemil-design-engimpeccablegenerate-design, stitch-loop, code-to-design, or react-components~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.