design-flow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited design-flow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Turn an approved spec into a build-ready design package. Use after spec-driven-development and before build when the spec says the work touches UI, visual direction, brand/KV, interaction states, motion, or any customer-facing workflow where visual quality affects delivery. Skip design only when the spec or project applicability clearly marks UI/design as not needed.
trade-offs before choosing a direction.
scope, but do not skip required design gates.
<project-name>/.dev-agent/and source output under the project root.
criteria before build. Delegate formal visual-source rules to the design artifact reference and executable gates.
evidence only. They cannot be the build target.
Use JS or Lottie assets when motion must be reproduced.
through the imagegen skill or an explicit Codex CLI image-generation path. Do not author SVG/HTML/canvas locally and render PNG for final identity assets.
Save design artifacts under <project-name>/.dev-agent/design/:
DESIGN.mdVISUAL_SYSTEM.mdSCREEN_ACCEPTANCE.mdDESIGN_ARTIFACTS.mdDESIGN_IMAGE_DESCRIPTIONS.md when required by the design artifact contractFIGMA_HANDOFF.md when required by the Figma handoff contractREFERENCE_BOARD.md when visual direction is delegateddesign/approved/html/assets when required
Use dev-agent/templates/project/ for file templates. Use dev-agent/references/design-artifacts.md and dev-agent/references/figma-handoff.md for the detailed source contract.
PRD.md, USER_STORIES.md,ACCEPTANCE.md, METRICS.md) when present, agent notes when present, the spec, project type, applicability flags, prior design artifacts, reference intake, and existing app screens when code exists.
<project-name>/.bin/dev-flow reference-check <project-name> --required.
typography, spacing, color, motion, density, and state patterns.
ask for examples before build.
REFERENCE_BOARD.md andrun bin/dev-flow reference-check <project-name> --delegated.
currently feels unclear, slow, risky, or unfinished.
improves trust, or speeds up a real workflow.
secondary actions, permissions, confirmations, undo, and state model.
conversational expression unless the user approves the LLM as decision owner.
references/platform-ux-principles.md when platform behavior matters.density, motion, accessibility, CSS token strategy, and forbidden visual patterns.
nested card stacks, and oversized hero layouts in utility products.
SCREEN_ACCEPTANCE.md headings from the idea, PRD, userstories, acceptance criteria, spec, and interaction model.
Requirement source: with theupstream artifact, story, acceptance criterion, or spec section that justifies it.
acceptance, accessibility acceptance, and design asset needs when relevant.
and narrow-screen states when applicable.
HTML/CSS, visual-system, state, asset, and motion detail for a model or engineer to reproduce the UI without guessing.
to generation: visual-system and brand/KV direction, required screen images, HTML/CSS packages, CSS/JS or Lottie motion files when needed, and logo/app-icon sizes when product identity is in scope.
load imagegen or use the Codex CLI image-generation path explicitly. Save the resulting raster assets and record imagegen://, gpt-image://, or gpt-image-2:// provenance.
dev-agent/references/design-artifacts.md when formal assets,AI-image design, runtime cut assets, or visual QA are in scope.
dev-agent/references/figma-handoff.md andrun bin/dev-flow figma-check <project-name>.
HTML file under .dev-agent/design/approved/html/ with CSS resources that encode the visual system and responsive layout. Add JS or Lottie files only when motion is part of acceptance.
keep the HTML/CSS package as the implementation-readable handoff.
for the target platform from Image Gen/GPT Image outputs. Local SVG renders are drafts only and must not be treated as final PNG assets.
DESIGN_ARTIFACTS.md, DESIGN_IMAGE_DESCRIPTIONS.md,FIGMA_HANDOFF.md, and ASSET_MANIFEST.md only when the referenced contracts require them.
.dev-agent/tasks/IMPLEMENTATION_TRACE.md aligned with the screens and statesthat build will implement.
references/design-rubric.md for design self-review when useful.bin/dev-flow design-check <project-name> before build.DESIGN.md, VISUAL_SYSTEM.md, and SCREEN_ACCEPTANCE.md exist.SCREEN_ACCEPTANCE.md section names its upstream requirement source.dev-agent/references/design-artifacts.md.dev-agent/references/figma-handoff.md when used.screens, and states are explicit.
bin/dev-flow design-check <project-name> passes before build.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.