creo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited creo (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="screenshots/cover-image.svg" alt="Creo — Design & Development Toolkit" width="100%" /> </p>
<p align="center"> AI-powered design, UX, content, DevOps, and testing toolkit for <a href="https://claude.com/claude-code">Claude Code</a>. <br /> 12 specialized skills, 12 parallel subagents, and 3 optional extensions. </p>
<p align="center"> <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="MIT License" /></a> <a href="https://github.com/oyusypenko/creo"><img src="https://img.shields.io/badge/Claude_Code-Skill-6366f1" alt="Claude Code Skill" /></a> <a href="https://github.com/oyusypenko/creo/stargazers"><img src="https://img.shields.io/github/stars/oyusypenko/creo?style=social" alt="GitHub Stars" /></a> <a href="https://github.com/oyusypenko/creo/releases"><img src="https://img.shields.io/github/v/release/oyusypenko/creo" alt="Latest Release" /></a> </p>
Without Creo: You manually check responsive layouts, accessibility, SEO tags, write marketing copy, configure CI/CD, and set up tests -- each requiring different tools and expertise.
With Creo: One toolkit handles all of it. Run /creo design-review and get a full responsive + WCAG + heuristic audit. Run /creo seo for a complete SEO analysis. Run /creo marketing-site full to orchestrate an entire marketing site build with content, SEO, design review, localization, and QA -- all in parallel.
curl -fsSL https://raw.githubusercontent.com/oyusypenko/creo/main/install.sh | bashirm https://raw.githubusercontent.com/oyusypenko/creo/main/install.ps1 | iexgit clone https://github.com/oyusypenko/creo.git
cd creo
./install.sh<!-- TODO: Add terminal demo GIF here once recorded with asciinema/vhs -->
claude # Start Claude Code
/creo design-review http://localhost:3000 # Review a page
/creo content landing # Generate landing page copy
/creo seo init # (SEO: run this FIRST on any Next.js project)
/creo seo audit https://example.com # SEO audit (run after init)
/creo test unit # Run unit tests
/creo marketing-site full # Build full marketing siteThe creo-seo agent is Next.js-opinionated and works best when it has a cached project profile. Run these two commands in order on any new project:
.claude/skills/creo-seo/creo-seo-{project_id}.md with the page inventory, detected stack (App Router vs Pages, i18n locales, SEO libraries), existing schema types, business-type hypothesis, and detected gaps. All subsequent SEO commands load this profile for context, skipping redundant scans..claude/reports/seo/.Re-run /creo seo init --refresh when you change router type, upgrade Next.js major version, add/remove locales, or modify next.config.* or package.json significantly.
For content-only deep dives (E-E-A-T, humanity score, citability rewrites, internal-linking audit), use /creo seo-content audit <url>.
Creo stamps the installed commit SHA to ~/.claude/skills/creo/.version and ships both an updater and a non-blocking update check.
Unix/macOS:
curl -fsSL https://raw.githubusercontent.com/oyusypenko/creo/main/update.sh | bash
# or, if already installed:
~/.claude/skills/creo/update.shWindows:
irm https://raw.githubusercontent.com/oyusypenko/creo/main/update.ps1 | iexThe updater runs uninstall.sh first so removed files are actually cleaned up, then reinstalls from main.
Add a SessionStart hook in .claude/settings.json (project or user level) to check for updates when Claude Code starts. Silent on success, prints a one-line warning when an update is available. Never blocks or fails the session.
{
"hooks": {
"SessionStart": [{
"hooks": [{
"type": "command",
"command": "bash ~/.claude/skills/creo/update-check.sh"
}]
}]
}
}Windows:
{
"hooks": {
"SessionStart": [{
"hooks": [{
"type": "command",
"command": "powershell -ExecutionPolicy Bypass -File %USERPROFILE%/.claude/skills/creo/update-check.ps1"
}]
}]
}
}The check fetches the latest commit on main from the GitHub API (3s timeout, falls back to git ls-remote) and compares against the installed .version. Offline and rate-limited cases exit silently.
Environment overrides (rarely needed):
CREO_REPO — repo slug (default: oyusypenko/creo)CREO_SKILL_DIR — install location (default: ~/.claude/skills/creo)CREO_TIMEOUT — curl timeout in seconds (default: 3)Teach any Creo skill about your project's domain, conventions, and file paths without modifying Creo itself. Extensions live inside your project repo at .claude/skills/creo-{skill}/creo-{skill}-{project_id}.md and are loaded automatically at the start of every skill run.
How it works:
project_id: "my-project" in .claude/project-config.md.claude/skills/creo-{skill}/creo-{skill}-{project_id}.md for any skill you want to customizeExample layout in your project:
.claude/
├── project-config.md # project_id, URLs, locales, etc.
└── skills/
├── creo-design-review/
│ └── creo-design-review-my-project.md # Design tokens, component rules
├── creo-pipeline/
│ └── creo-pipeline-my-project.md # CI/CD ports, services, deploy targets
├── creo-seo/
│ └── creo-seo-my-project.md # Keyword strategy, sitemap paths
├── creo-ai-generation/
│ └── creo-ai-generation-my-project.md # Zod schemas, prompts, queue names
└── creo-unit-test/
└── creo-unit-test-my-project.md # Test utilities, factories, mocksWhat extensions can contain:
Why it matters:
Upstream Creo skills stay generic and reusable across any codebase. Your project-specific knowledge lives in your repo, survives Creo updates, and stays version-controlled alongside the code it describes. The same pattern works for all 12 skills plus DevOps subagents (GitHub/Cloudflare/Railway/Stripe CLI).
Creo skills use the standard SKILL.md format, making them compatible with:
| Command | Purpose |
|---|---|
/creo design-review <url> | UI/UX review (responsive, WCAG AA, heuristics) |
/creo design-implement <report> | Execute design fixes from review reports |
/creo ux-internal <flow> | Analyze your own app's UX flows |
/creo ux-competitor <url> | Analyze competitor websites |
/creo content <page-type> | Generate marketing copy (JTBD, pain points) |
/creo image-prompt <context> | Generate image prompts for AI models |
/creo seo <url> | SEO audit & optimization |
/creo devops <command> | Infrastructure (GitHub/Cloudflare/Railway/Stripe) |
/creo pipeline <command> | CI/CD pipeline specialist (GitHub Actions) |
/creo test <command> | Test orchestration (unit + E2E) |
/creo marketing-site <command> | Full marketing site creation (7-stage) |
/creo ai-generation <command> | AI generation pipeline expertise |
Need just one skill? Each is available as a standalone install under creo-kit:
| Skill | Repository | Install | |
|---|---|---|---|
| SEO Audit | claude-seo-audit | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-seo-audit/main/install.sh \ | bash` |
| Design Review | claude-design-review | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-design-review/main/install.sh \ | bash` |
| Design Implement | claude-design-implement | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-design-implement/main/install.sh \ | bash` |
| UX Audit | claude-ux-audit | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-ux-audit/main/install.sh \ | bash` |
| Competitor Analysis | claude-competitor-analysis | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-competitor-analysis/main/install.sh \ | bash` |
| Marketing Content | claude-marketing-content | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-marketing-content/main/install.sh \ | bash` |
| Image Prompt | claude-image-prompt | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-image-prompt/main/install.sh \ | bash` |
| DevOps Toolkit | claude-devops-toolkit | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-devops-toolkit/main/install.sh \ | bash` |
| CI/CD Pipeline | claude-ci-pipeline | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-ci-pipeline/main/install.sh \ | bash` |
| Test Orchestrator | claude-test-orchestrator | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-test-orchestrator/main/install.sh \ | bash` |
| Marketing Site | claude-marketing-site | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-marketing-site/main/install.sh \ | bash` |
| AI Generation | claude-ai-generation | `curl -fsSL https://raw.githubusercontent.com/creo-kit/claude-ai-generation/main/install.sh \ | bash` |
Install the full Creo toolkit to get all 12 skills at once, or pick individual ones above.
Extensions add tool-backed capabilities. Each is self-contained with its own install/uninstall.
| Extension | What it adds | Requirements |
|---|---|---|
| image-generation | DALL-E 3 & ComfyUI image generation | Node.js 18+, OPENAI_API_KEY |
| i18n-translator | Batch JSON translation (39+ languages) | Python 3, LM Studio |
| gsc-analyzer | Google Search Console analysis (15+ analyzers) | Python 3, Google service account |
# After cloning the repo:
./extensions/image-generation/install.sh
./extensions/i18n-translator/install.sh
./extensions/gsc-analyzer/install.shExtension commands become available after install:
/creo image-generation generate -- Generate marketing images/creo i18n translate en uk,pl,de -- Batch translate locales/creo gsc full-seo https://example.com -- Full GSC analysiscreo/
├── creo/SKILL.md # Main orchestrator (entry point)
├── creo/references/ # 12 on-demand knowledge files
├── skills/ # 12 sub-skills
├── agents/ # 12 parallel subagents
├── extensions/ # 3 optional extensions
│ ├── image-generation/ # Node.js (DALL-E 3, ComfyUI)
│ ├── i18n-translator/ # Python (LM Studio)
│ └── gsc-analyzer/ # Python (Google Search Console)
├── install.sh / install.ps1 # One-liner installers
└── uninstall.sh / uninstall.ps1 # Clean removalcurl -fsSL https://raw.githubusercontent.com/oyusypenko/creo/main/uninstall.sh | bashExtensions must be uninstalled separately via their own uninstall scripts.
See CONTRIBUTING.md for guidelines.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.