Skip to content
skillsafebeta
← Report library
Purpose / Other

Minimalist Ui Skill Security Audit

What the author says it does (original text)

Clean editorial-style interfaces. Warm monochrome palette, typographic contrast, flat bento grids, muted pastels. No gradients, no heavy shadows.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Remote placeholder images make visitors contact a third party

Source references: 1
What we found

When real assets are unavailable, the Skill recommends embedding a picsum.photos URL directly in generated pages. Loading that image causes the browser to contact the third party, which can ordinarily receive the visitor's IP address, request time, browser-supplied request metadata, and the context value included in the URL.

Why this matters

If the generated code is previewed or deployed, visitors may unexpectedly connect to a third party, creating privacy, external-dependency, and organizational network-policy risks. The evidence does not show that the service collects additional data or that any disclosure has already occurred.

The live instruction recommends a remote `picsum.photos` image when real assets are unavailable. If generated pages retain that URL, each visitor’s browser will contact the third party and disclose information normally available with a web request, such as IP address, request time, browser headers, and the `{context}` value in the URL path. This risk applies only when the remote resource is actually embedded and loaded. Users can ask for local placeholders, downloaded/self-hosted assets, or explicit consent before external loading.

SKILL.md:66In the instructionsOpen original file
- Illustrations: Monochromatic, rough continuous-line ink sketches on a white background, featuring a single offset geometric shape filled with a muted pastel color.- Photography: Use high-quality, desaturated images with a warm tone. Apply subtle overlays (`opacity: 0.04` warm grain) to blend photos into the monochrome palette. Never use oversaturated stock photos. Use reliable placeholders like `https://picsum.photos/seed/{context}/1200/800` when real assets are unavailable.- Hero & Section Backgrounds: Sections should not feel empty and flat. Use subtle full-width background imagery at very low opacity, soft radial light spots (`radial-gradient` with warm tones at `opacity: 0.03`), or minimal geometric line patterns to add depth without breaking the clean aesthetic.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

8 instruction sections

This Skill is a frontend visual specification. It directs generated HTML, React, Tailwind, or Vue layouts to use consistent spacing, typography, borders, animation, and an editorial style. The provided source contains no installation commands, credential requests, file-deletion instructions, or account operations.

View source
SKILL.md:77In the instructionsOpen original file
## 8. Execution ProtocolWhen tasked with writing frontend code (HTML, React, Tailwind, Vue) or designing a layout:1. Establish the macro-whitespace first. Use massive vertical padding between sections (e.g., `py-24` or `py-32` in Tailwind).2. Constrain the main typography content width to `max-w-4xl` or `max-w-5xl`.3. Apply the custom typographic hierarchy and monochromatic color variables immediately.4. Ensure every card, divider, and border adheres strictly to the `1px solid #EAEAEA` rule.5. Add scroll-entry animations to all major content blocks.6. Ensure sections have visual depth through imagery, ambient gradients, or subtle textures — no empty flat backgrounds.7. Provide code that reflects this high-end, uncluttered, editorial aesthetic natively without requiring manual adjustments.

The Skill specifies viewport-entry animation through IntersectionObserver and limits animation to transform and opacity. These are in-browser interface behaviors and do not request system-level permissions.

View source
SKILL.md:71In the instructionsOpen original file
Motion should feel invisible — present but never distracting. The goal is quiet sophistication, not spectacle.- Scroll Entry: Elements fade in gently as they enter the viewport. Use `translateY(12px)` + `opacity: 0` resolving over `600ms` with `cubic-bezier(0.16, 1, 0.3, 1)`. Use `IntersectionObserver`, never `window.addEventListener('scroll')`.- Hover States: Cards lift with an ultra-subtle shadow shift (`box-shadow` transitioning from `0 0 0` to `0 2px 8px rgba(0,0,0,0.04)` over `200ms`). Buttons respond with `scale(0.98)` on `:active`.- Staggered Reveals: Lists and grid items enter with a cascade delay (`animation-delay: calc(var(--index) * 80ms)`). Never mount everything at once.- Background Ambient Motion: Optional. A single, very slow-moving radial gradient blob (`animation-duration: 20s+`, `opacity: 0.02-0.04`) drifting behind hero sections. Must be applied to a `position: fixed; pointer-events: none` layer. Never on scrolling containers.- Performance: Animate exclusively via `transform` and `opacity`. No layout-triggering properties (`top`, `left`, `width`, `height`). Use `will-change: transform` sparingly and only on actively animating elements.
Start here · InstructionsSKILL.md
minimalist-ui
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Connect to websites
SKILL.md:66In the instructionsOpen original file
- Illustrations: Monochromatic, rough continuous-line ink sketches on a white background, featuring a single offset geometric shape filled with a muted pastel color.- Photography: Use high-quality, desaturated images with a warm tone. Apply subtle overlays (`opacity: 0.04` warm grain) to blend photos into the monochrome palette. Never use oversaturated stock photos. Use reliable placeholders like `https://picsum.photos/seed/{context}/1200/800` when real assets are unavailable.- Hero & Section Backgrounds: Sections should not feel empty and flat. Use subtle full-width background imagery at very low opacity, soft radial light spots (`radial-gradient` with warm tones at `opacity: 0.03`), or minimal geometric line p …
Lines read
86
File checksum (to compare versions)
75183609f71a4dc55166b7b65186e24642482ad20243c98b091e9ad77bc3b565