frontend-ui-engineering — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited frontend-ui-engineering (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Build production-quality interfaces that match the approved design contract, respect platform conventions, and survive functional, exploratory, and visual QA. The output should feel intentionally designed, not template-generated.
state management, tests, and build commands.
missing design inputs before changing UI code.
explicitly required.
Do not start customer-facing UI implementation until these exist and pass for the current scope:
<project-name>/.dev-agent/design/DESIGN.md<project-name>/.dev-agent/design/VISUAL_SYSTEM.md<project-name>/.dev-agent/design/SCREEN_ACCEPTANCE.md<project-name>/.dev-agent/tasks/IMPLEMENTATION_TRACE.mdbin/dev-flow design-check <project-name>Also read these when applicable:
DESIGN_ARTIFACTS.md, DESIGN_IMAGE_DESCRIPTIONS.md, FIGMA_HANDOFF.md,design/approved/html/, and design/cut-assets/ASSET_MANIFEST.md when required by the design contract
Satisfy dev-agent/references/design-artifacts.md and run bin/dev-flow design-check <project-name>. When Figma is used, satisfy dev-agent/references/figma-handoff.md and run bin/dev-flow figma-check <project-name>. If required design inputs cannot be confirmed, stop and return to design instead of implementing around a guess.
DESIGN.md, VISUAL_SYSTEM.md, and SCREEN_ACCEPTANCE.md.Use formal assets and HTML/CSS design packages only through the design artifact contract.
return to design instead of guessing.
SCREEN_ACCEPTANCE.md screen/state to implementationfiles, design contract inputs, and test evidence.
tasks/IMPLEMENTATION_TRACE.md current as work progresses.variants, icon/illustration usage, motion, and state rules.
layout, responsive behavior, states, and motion. Adapt to the app stack deliberately instead of copying brittle static markup wholesale.
responsive behavior, and required empty/loading/error/success states.
deviation in the trace or review artifact.
test helpers, and accessibility utilities.
established local pattern.
long-content, narrow-screen, and permission states when applicable.
risks are visible during development.
recorded in tasks/PLAN.md or tasks/IMPLEMENTATION_TRACE.md.
runtime screenshot capture wait until the batch is implemented.
regressions that need proof, or explicit user request.
bin/dev-flow ui-polish <project-name> when it happens.
polish in reviews/UI_DEBT.md and advance to the next implementation task.
card grids, nested cards, excessive shadows, and oversized hero layouts in utility products.
toolbars, and repeated tiles so labels, icons, hover states, and dynamic content do not shift layout.
widths.
the approved design uses illustrated icons or product imagery.
Use references/accessibility-checklist.md for detail. Minimum bar:
status regions.
design/cut-assets/ASSET_MANIFEST.md as the runtime asset source of truthwhen the design artifact contract requires it.
before release packaging when product assets are in scope.
QA is optional unless AUTOMATED_QA or VISUAL_QA is required by .dev-agent/state/applicability.env or the user asks for it. After implementing the overall requested customer-facing UI scope:
tasks/IMPLEMENTATION_TRACE.md.
reviews/FUNCTIONAL_TEST.md.
invalid inputs, resizing, and state changes; save reviews/MONKEY_TEST.md.
VISUAL_QA is required, compare the UI against the required designcontract inputs; save reviews/VISUAL_COMPARISON.md.
VISUAL_COMPARISON.md must include Overall score: N/100, per-screen rowsfor every SCREEN_ACCEPTANCE.md screen, approved asset path, runtime surface, score, decision, differences, and final decision.
accessibility, source boundaries, simplicity, security/privacy impact, and performance risk. Use specialist personas only when risk warrants it.
narrows scope or lowers the bar.
reviews/visual-screenshots/ only whenreviews/EXCEPTION.md or reviews/BLOCKED_FLOW.md records an exception or blocked flow, or when the user explicitly asks for screenshots.
bin/dev-flow qa-check <project-name> when QA is required.Do not enter QA automatically after each build slice. Keep building until the requested implementation is complete, then run QA only when required or requested.
Use references/visual-qa-rubric.md for detailed scoring.
design-check and IMPLEMENTATION_TRACE.md.details after the UI polish budget is used.
bin/dev-flow design-check <project-name> passed before UI implementation.tasks/IMPLEMENTATION_TRACE.md maps screens to implementation targets andtest evidence; formal asset fields may be none when not required.
customer-facing UI.
user requests.
bin/dev-flow qa-check <project-name> passes when QA is required.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.