leadup-free-creative-assets-finder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited leadup-free-creative-assets-finder (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Help a LeadUp team member find free or safe-to-use creative assets (photos, stock images, vectors, illustrations, icons, animated icons, Lottie animations, GIFs, stickers, 3D models, 3D icons, video clips, emojis, avatars, sound effects, background music) for client websites, SaaS products, admin panels, Flutter apps, social posts, ads, blogs, proposals, and project pages — with the license verified for commercial use, attribution, modification, and redistribution before recommending.
The output is a ready-to-act asset plan: best source categories, search keywords, a candidate sources table, license + attribution notes, format recommendation, implementation + performance notes, a single best recommendation, backup sources, and risk flags.
Trigger when the user needs creative media for a LeadUp project and asks for free / royalty-free / safe-to-use sources, or names a specific asset type with no source picked yet.
Trigger phrases: "free images", "find free assets", "free vector", "free icons", "free animation", "free lottie", "free gif", "free 3d", "free video clip", "free avatar", "free emoji", "asset finder", "design resources", "website assets", "social media assets", "hero image", "illustration for website", "icons for SaaS", "stock video for ad", "free creative sources".
Do not trigger when:
Storyblocks, Adobe Stock) and just wants picks from there.
generation skill / tool, not this finder).
leadup-premium-ui-upgrader) or full design system creation.
Ask at most 2 clarifying questions. Defaults are noted.
Required:
GIF / sticker / 3D model / 3D icon / video clip / emoji / avatar / sound / music.
empty state, dashboard icon set, admin panel, Flutter app screen, Instagram reel, Meta ad creative, LinkedIn post, YouTube thumbnail, proposal PDF, client report, etc.
Jewellery SaaS, Salon SaaS, BRC-Buddy, INET CRM, etc.) or a one-line description.
Helpful (assume if unstated):
realistic / photographic / minimal / colourful.
GLB, OBJ. Default: SVG for icons/illustrations, WebP for photos, Lottie JSON for animations, WebM/MP4 for video, GLB for 3D.
illustrations, etc.
no-attribution preferred. Flag if only attribution-required sources fit.
16:9 YouTube thumbnail, 24x24 / 48x48 icon, A4 PDF cover.
Default mode if nothing is stated: "website / SaaS use, commercial, no-attribution preferred, modern flat style, SVG / WebP / Lottie".
Always prefer sources with a clear, permissive license over scraping or hot-linking. Full source matrix and license notes live in references/free-asset-source-list.md. Summary by asset type:
Photos / stock images — Unsplash, Pexels, Pixabay, Wikimedia Commons, Openverse.
Videos / video clips — Pexels Videos, Pixabay Videos, Coverr, Mixkit, Videvo.
Illustrations / vectors — unDraw, Storyset, SVG Repo, Open Doodles, ManyPixels Gallery, IRA Design.
Icons — Iconify, Lucide, Heroicons, Tabler Icons, Feather Icons, Remix Icon, Phosphor Icons, Bootstrap Icons, Material Symbols.
Animations (Lottie / animated icons) — LottieFiles, Lordicon, useAnimations, Potlab Icons, IconScout free assets.
3D models / 3D icons — Pixabay 3D Models, IconScout 3D Icons, Spline Community, Sketchfab (free downloadable filter), BlenderKit free assets.
Avatars — DiceBear, Boring Avatars, Avataaars, UI Avatars.
Emojis — native Unicode emoji, Twemoji, OpenMoji, Noto Emoji.
GIFs / stickers — Pixabay GIFs, GIPHY, Tenor, LottieFiles GIF exports.
Sound effects / music (only if asked) — Pixabay Music, Free Music Archive, YouTube Audio Library, Freesound (per-track license).
Source selection rules:
attribution" first.
licenses (Lucide, Heroicons, Tabler, Feather, Phosphor, Remix, Bootstrap Icons, Material Symbols).
possible.
surface that clearly — do not suggest scraping watermarked previews.
quantity, format, aspect, commercial use, attribution preference.
Choose 3–6 candidate sources to compare; do not dump the whole list.
references/search-keyword-framework.md: include subject + style + colour + context terms, and a "negative" list (things to avoid like "watermark", "lorem ipsum", "AI generated" when the brand wants real).
references/asset-format-guide.md(SVG / PNG / WebP / AVIF / JPG / Lottie JSON / GIF / WebM / MP4 / GLB / OBJ / FBX). Flag mismatch (e.g. PNG for a hero — prefer WebP).
references/license-checklist.md and the "License verification workflow" below.
references/performance-optimization-guide.md (sizes, formats, loading strategy, srcset, Lottie weight, video poster).
unclear license, attribution requirement, or model/property release risk.
For every recommended source/asset, check and report:
the source site itself, not a blog post about it.
unclear, mark Needs license verification.
credit format (name + link). If the project cannot show attribution (e.g. a logo, a hero with no caption space), prefer a no-attribution source.
Some sources allow display but not derivative works.
asset itself (e.g. you cannot sell the Unsplash photo as a print or in a stock pack). Flag this for proposal / template products.
client logos or trademark marks. Flag this clearly.
identifiable people, recognisable buildings, branded products, or art: flag model / property release risk. Do not assume the source has cleared releases unless its license explicitly states it.
(Unsplash, Pexels, GIPHY, Tenor, Iconify, LottieFiles, DiceBear), note API key requirements, rate limits, attribution/branding rules, and TOS limits.
source against its TOS, even if the assets are individually free.
check, mark the asset/source as Needs license verification and surface it in the risk notes. Do not claim safety you cannot confirm.
Full checklist with per-source notes is in references/license-checklist.md.
Score each candidate source/asset on a 1–5 scale (5 = best) for:
(attribution, redistribution, trademarks, releases).
needed; vector preferred where it applies.
CDN availability, copy-paste embed.
for business; friendly + soft for jewellery, salon, BRC-Buddy; clean + technical for Hostendor, INET CRM).
Recommendation rules:
safety, and brand fit.
— output a "Needs license verification" entry and stop.
availability → performance → visual fit.
Return a single Markdown block with these sections, in this order:
surface, asset type, style, quantity, format, aspect, attribution preference).
sets" + "Illustration libraries with MIT/CC0".
style, colour, context, and negatives.
Asset Type · License Summary · Attribution · Commercial Use · Modification · Format · Score (sum or weighted) · Notes.
name, URL of the official terms (label [official terms]), required credit format (if any), and restrictions (trademarks, releases, redistribution).
format if browser/app support is a concern.
goes, component / tag to use, lazy-load, responsive sizes, caching, accessibility (alt text, aria-label, captions, reduced-motion).
≤ 200 KB WebP, Lottie ≤ 50 KB JSON, video ≤ 1.5 MB with poster), CDN, loading="lazy", decoding="async", prefers-reduced-motion.
keywords to use on that source, and what to do if nothing fits.
flags, any model/property release risk, any API/TOS limit, any attribution that the project cannot show.
Use the asset template in assets/asset-search-brief.template.md and the comparison table in assets/asset-comparison-table.template.md as the output shape. License capture is in assets/license-check.template.md. For website-heavy briefs, use assets/website-asset-plan.template.md; for social, use assets/social-asset-plan.template.md.
ambiguous after a reasonable check, label the candidate Needs license verification and explain why.
forbid resale, trademarks, or use in client logos.
no-attribution sources. If attribution is required, include the exact required credit text and where to place it.
people, branded products, recognisable buildings, or artwork. Do not assume releases are cleared.
characters, film stills, sports team marks, celebrity faces) unless the user owns the rights or has a licensed source.
are free, bulk-pulling against site terms is not allowed.
serving from the project's own CDN / storage.
required brand display (Unsplash, Pexels, GIPHY, Tenor, etc.).
trademark; flag for any client where the asset goes into branding.
flag it; some clients reject AI content, and license + IP status of AI content varies.
illustrations and avatars over real-child photos; flag any photo that shows identifiable children.
the source platform's watermark is baked in (e.g. some GIPHY brand watermarks) for paid client work.
rights (e.g. YouTube Content ID) before recommending for ads / reels.
body images ≤ 80 KB. Use srcset + sizes for responsive. Always set explicit width / height to avoid CLS.
via a component library (Lucide, Tabler, Heroicons). Sprite for many static icons. Use aria-hidden="true" on decorative.
with SVGO. Avoid 2 MB SVGs from generic exporters — strip metadata and IDs.
/ WebM for complex 3D motion. Honour prefers-reduced-motion.
smaller). Reserve GIFs for messaging / WhatsApp / proposal docs.
poster,playsinline, muted, and preload="metadata". Hero loops ≤ 1.5 MB.
Lazy-load 3D scenes; warn that 3D is heavy on low-end mobile.
them deterministically so the same user always gets the same avatar.
only when cross-platform consistency is required.
loading="lazy" for below-the-fold,decoding="async" for images, fetchpriority="high" only for the LCP image. Preload hero image when needed.
alt; decorative icons getaria-hidden="true"; videos need captions when there is speech; animations honour reduced-motion.
Full checklist in references/performance-optimization-guide.md.
the required credit.
and serving from the project's storage.
brand needs a unique, ownable feel.
rest of the UI (mixing Heroicons and Material Symbols randomly).
branded products.
surface (use illustrations / safe avatars).
terms page is missing or ambiguous.
and the skill did not fire — re-invoke and surface trigger phrases.
to leadup-premium-ui-upgrader. User wanted AI-generated images → route to the matching generation tool.
and brand fit, say so explicitly and recommend either commissioning the asset or buying from a paid stock site (note the user's existing Shutterstock / Envato / Adobe Stock if relevant).
do not claim safety. Suggest the user verify directly on the source.
illustration alternative or a photo of hands / objects / scenes.
to illustrations and safe avatars; never recommend real-child photos.
icon set, illustration series), recommend sticking to a single source / family for visual consistency.
edited; raster images are harder to recolour and may need a paid alternative.
caching to the project CDN and respecting the source's brand-display rules.
set, SVG, MIT-licensed if possible, matching a clean technical look."
— flat style, blue/teal palette, no attribution preferred."
under 50 KB each, friendly tone."
Instagram reels, vertical 1080x1920?"
commercial use safe."
leadup-premium-ui-upgrader)
image generation, not a free-asset finder.)
mark — refuse / out of scope.)
style, blue palette, commercial use, no attribution", return a Markdown report with all 11 output sections, a candidate sources table with at least 3 sources (e.g. unDraw / Storyset / SVG Repo) scored on the 8-criterion framework, a single best recommendation that scores ≥ 4 on visual fit, license clarity, commercial safety, and brand fit, 2 backups, performance notes targeting SVG with gzip / brotli, and at least one risk note if any candidate has unclear redistribution / trademark terms.
Salon SaaS landing hero", return the report and explicitly flag model release risk in the Risk notes section, suggest an illustration alternative (Storyset / unDraw) if release risk is too high, and do not mark the photo as commercially safe unless the source's license explicitly covers model release.
checklist; ambiguous cases are labelled "Needs license verification".
safety, and brand fit, or no top pick is given.
limits, and model/property release risks are surfaced — never hidden.
WebM / GLB) and include weight targets and loading strategy.
children-sensitive contexts, no GIPHY-watermarked content for paid client surfaces, no hot-linking advice.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.