design-system — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited design-system (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyse an existing website, HTML file, or screenshot and synthesise a semantic design system into a DESIGN.md file. The output is optimised for use with the design-loop skill and general page generation.
.design/DESIGN.md before running the design loopAsk the user for one of:
| Source | Method |
|---|---|
| Live URL | Browse via Playwright CLI or scraper, screenshot + extract HTML |
| Local HTML file | Read the file directly |
| Screenshot image | Analyse visually (limited — no exact hex extraction) |
| Existing project | Scan site/public/ for HTML files to analyse |
| Stitch project | Use @google/stitch-sdk to fetch screen HTML + design theme |
#### From a Live URL
playwright-cli -s=design open {url}
playwright-cli -s=design screenshot --filename=.design/screenshots/source-desktop.png playwright-cli -s=design resize 375 812
playwright-cli -s=design screenshot --filename=.design/screenshots/source-mobile.pngplaywright-cli -s=design close#### From a Local HTML File
Read the file directly and extract design tokens from the source.
#### From a Screenshot Only
Analyse the image visually. Note: colour extraction will be approximate without HTML source. Flag this limitation in the output.
#### From a Google Stitch Project
If @google/stitch-sdk is installed and STITCH_API_KEY is set:
import { stitch } from "@google/stitch-sdk";
// List projects to find the target
const projects = await stitch.projects();
// Get project details (includes designTheme)
const project = stitch.project(projectId);
const screens = await project.screens();
// Get HTML from the main screen
const screen = screens[0]; // or find by title
const htmlUrl = await screen.getHtml();
const imageUrl = await screen.getImage();The Stitch designTheme object provides structured tokens directly:
{
"colorMode": "DARK",
"font": "INTER",
"roundness": "ROUND_EIGHT",
"customColor": "#40baf7",
"saturation": 3
}Map these to DESIGN.md sections:
colorMode → Theme (Light/Dark)font → Typography font familyroundness → Component border-radius (ROUND_EIGHT = 8px, ROUND_SIXTEEN = 16px, etc.)customColor → Primary brand coloursaturation → Colour vibrancy (1-5 scale)Then also download and analyse the HTML for the full palette (Stitch's theme object only has the primary colour — the full palette is in the generated CSS).
Extract these from the HTML/CSS source:
#### Colours
Look in these locations (priority order):
:root { --primary: #hex; } or @theme blocks<script> block with tailwind.config or @theme in <style>style="color: #hex" or style="background: #hex"bg-blue-600, text-gray-900 (map to palette)For each colour found, determine its role:
| Role | How to identify |
|---|---|
| Primary | Buttons, links, active states, brand elements |
| Background | <body> or <html> background |
| Surface | Cards, containers, elevated elements |
| Text Primary | <h1>, <h2>, main body text |
| Text Secondary | Captions, metadata, muted text |
| Border | Dividers, input borders, card borders |
| Accent | Badges, notifications, highlights |
#### Typography
Extract:
| Token | Where to find |
|---|---|
| Font families | Google Fonts <link>, @import, font-family in CSS |
| Heading weights | font-bold, font-semibold, or explicit font-weight |
| Body size | Base font-size on <body> or root |
| Line height | leading-* classes or line-height CSS |
| Letter spacing | tracking-* classes or letter-spacing CSS |
#### Components
Identify patterns for:
#### Spacing & Layout
max-w-* or explicit max-widthCritical: The DESIGN.md should describe the design in semantic, natural language supported by exact values. This is not a CSS dump — it's a document a designer or AI can read to understand and reproduce the visual language.
| Don't write | Write instead |
|---|---|
rounded-xl | "Softly rounded corners (12px)" |
shadow-md | "Subtle elevation with diffused shadow" |
#1E40AF | "Deep Ocean Blue (#1E40AF) for primary actions" |
py-16 | "Generous section spacing with breathing room" |
Output the file to .design/DESIGN.md (or user-specified path).
Follow the structure from the design-loop skill's references/site-template.md — specifically the DESIGN.md Template section. The key sections are:
If browser automation is available:
Present:
If the site has multiple pages with different styles:
bg-slate-900 needs mapping to a role.dark class overrides or prefers-color-scheme media queries.dark class or media query)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.