cm-design-system-40aa42 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cm-design-system-40aa42 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Establish a robust, stable, and consistent UI Design System by either extracting tokens from an existing source (Harvester mode) or scaffolding a fresh system based on premium Kits (Shadcn, Halo, Lunaris, Nitro). Output a strictly formatted DESIGN.md artifact ready for UI generation.
.cm/design-taste.json exists): Before proposing tokens, call topTaste(cwd, 'color'), topTaste(cwd, 'font'), topTaste(cwd, 'layout') from src/utils/design-taste.ts. Bias selections toward approved entries; avoid rejected. Decay is 5 %/week so stale taste fades — trust live weights. After the user accepts or rejects a palette, call recordTaste(cwd, { dimension, value, verdict }) so future runs improve.skills/cm-design-system/resources/ into the project's .stitch/DESIGN.md or pass directly to cm-ui-preview:shadcn-default.md (Use this as the absolute DEFAULT if no style is specified)halo-modern.md (Premium dark mode, glowing accents)lunaris-advanced.md (Tech-focused, monospaced fonts)nitro-enterprise.md (High-contrast, data-dense enterprise)DESIGN.md with <!-- STITCH_TOKENS_START --> JSON block to feed design tokens into Google Stitch's AI generator via cm-ui-preview..pen design files directly:Pencil.dev Workflow:
1. open_document() → Create/open a .pen file
2. get_guidelines("web-app") → Load design rules for target platform
3. get_style_guide_tags() → Browse available style tags
4. get_style_guide(tags) → Get color palette, typography, spacing
5. set_variables() → Apply design tokens as .pen variables
6. batch_get(reusable:true)→ Read existing design system components
7. batch_design() → Insert/update components and screens
8. get_screenshot() → Verify visual outputMapping DESIGN.md tokens to .pen variables:
mcp_pencil_set_variables({
filePath: "design-system.pen",
variables: {
"primary": { "type": "color", "value": "#3B82F6" },
"secondary": { "type": "color", "value": "#10B981" },
"surface": { "type": "color", "value": "#FFFFFF" },
"text-primary": { "type": "color", "value": "#0F172A" },
"border-radius": { "type": "number", "value": 8 },
"spacing-sm": { "type": "number", "value": 8 },
"spacing-md": { "type": "number", "value": 16 },
"spacing-lg": { "type": "number", "value": 32 }
}
})cm-ui-preview.view_file or grep_search on .pen files. Always use mcp_pencil_batch_get.DESIGN.md document.<!-- STITCH_TOKENS_START --> and <!-- STITCH_TOKENS_END -->.Input: "Can you extract the design system from stripe.com to use in our project?" Action:
DESIGN.md including the Stitch STITCH_TOKENS JSON block with these tokens.DESIGN.md. Would you like me to hand this off to cm-ui-preview to generate components?"Input: "Create a modern dark-mode design system using Halo UI kit." Action:
DESIGN.md with STITCH_TOKENS.Input: "Create a design system for our SaaS dashboard directly in Pencil.dev." Action:
.pen file: mcp_pencil_open_document({ filePathOrTemplate: "new" }).mcp_pencil_get_guidelines({ topic: "design-system" }).mcp_pencil_get_style_guide_tags() → mcp_pencil_get_style_guide({ tags: ["saas", "dashboard", "modern", "website", "clean"] }).mcp_pencil_set_variables() using the style guide's recommendations.mcp_pencil_batch_design().mcp_pencil_get_screenshot().design-system.pen. Would you like me to build screens using these components?"cm-ui-preview.<!-- STITCH_TOKENS_START --> wrapper in DESIGN.md. It is critical for Stitch MCP parsing.cm-ux-master heuristics).view_file or grep_search on .pen files. Always use Pencil MCP tools (batch_get, batch_design, etc.).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.