ui-ux-pro-max-skill

github/ui-ux-pro-max-skill

Fork 0

mirror of https://github.com/nextlevelbuilder/ui-ux-pro-max-skill.git synced 2026-08-14 00:38:49 +00:00

Commit Graph

Author	SHA1	Message	Date
Andras Polgar	3da52ff1ca	security: harden skill against agent-audit risk patterns (#417 ) Addresses the behavioral patterns that plausibly triggered the Gen (Agent Trust Hub) High Risk rating on skills.sh, without changing runtime functionality: - Prerequisites no longer instruct agents to run sudo/brew/apt/winget install commands; agents must ask the user to install Python instead (SKILL.md, skill-content.md template, README.md, README.zh.md) - Soften coercive invocation language ("Must Use" -> "Primary Use Cases") and replace keyword-stuffed frontmatter descriptions with factual ones (SKILL.md, quick-reference.md, claude/droid.json, plugin.json) - Remove design.csv, draft.csv and _sync_all.py: unused by the runtime (not registered in core.py CSV_CONFIG) and containing prompt-shaped "System Prompt: ... You are ..." blocks that read as injection risk - Fix path traversal in --persist: new safe_slug() restricts project and page names to [a-z0-9_-], so ../ in -p/--page can no longer escape the design-system/ output folder Verified: validate-csv.py (35 files), smoke-domains (12/12), smoke-stacks (22/22), check:assets in sync, persist traversal attempt stays confined. Co-authored-by: Andras Polgar <5525341+ruredi@users.noreply.github.com> Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-10 21:30:06 +07:00
rianadesigner	2aec7afb93	sync: 161 product types, design system 与 CLI 资产同步，小猫咪预览页 - products.csv: 修复 No.90/No.65 数据，统一 161 产品类型 - colors.csv: 修复 Bitcoin DeFi Mobile 截断，同步 178 色板 - ui-reasoning.csv: 与 products 对齐 - core.py: 扩展 product 域关键词覆盖 - README/SKILL: 更新 161 reasoning rules、178 palettes 等数字 - 移除 stacks 下多框架 CSV，保留 react-native - 新增 design.csv、_sync_all.py，CLI assets 全量同步 - 新增 preview/xiaomaomi-app.html 小猫咪 App 示例 Made-with: Cursor	2026-03-06 11:03:28 +08:00
Viet Tran	b2a05eceeb	feat: reorganize codebase with single source of truth + merge prompts into styles (#116 ) BREAKING CHANGES: - Moved canonical data/scripts to src/ui-ux-pro-max/ - Removed duplicate folders (.codex/, .gemini/, .trae/, .codebuddy/, .continue/, skills/, .qoder/) - CLI now uses template system instead of copying pre-built folders New features: - Merged prompts.csv into styles.csv with 4 new columns: - AI Prompt Keywords - CSS/Technical Keywords - Implementation Checklist - Design System Variables - All 67 styles now have complete prompt data - Added Astro stack (53 guidelines) - Added 10 new 2025 UI trend styles CLI changes: - New template rendering system (cli/src/utils/template.ts) - Reduced cli/assets from ~34MB to ~564KB - Assets now contain only: data/, scripts/, templates/ File structure: - src/ui-ux-pro-max/ - Single source of truth - .claude/skills/ - Symlinks to src/ for development - .shared/ - Symlink to src/ui-ux-pro-max/ Bumped CLI version: 2.1.3 → 2.2.0 Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-22 22:05:41 +07:00

Author

SHA1

Message

Date

Andras Polgar

3da52ff1ca

security: harden skill against agent-audit risk patterns (#417 )

Addresses the behavioral patterns that plausibly triggered the Gen
(Agent Trust Hub) High Risk rating on skills.sh, without changing
runtime functionality:

- Prerequisites no longer instruct agents to run sudo/brew/apt/winget
  install commands; agents must ask the user to install Python instead
  (SKILL.md, skill-content.md template, README.md, README.zh.md)
- Soften coercive invocation language ("Must Use" -> "Primary Use
  Cases") and replace keyword-stuffed frontmatter descriptions with
  factual ones (SKILL.md, quick-reference.md, claude/droid.json,
  plugin.json)
- Remove design.csv, draft.csv and _sync_all.py: unused by the runtime
  (not registered in core.py CSV_CONFIG) and containing prompt-shaped
  "System Prompt: ... You are ..." blocks that read as injection risk
- Fix path traversal in --persist: new safe_slug() restricts project
  and page names to [a-z0-9_-], so ../ in -p/--page can no longer
  escape the design-system/ output folder

Verified: validate-csv.py (35 files), smoke-domains (12/12),
smoke-stacks (22/22), check:assets in sync, persist traversal attempt
stays confined.

Co-authored-by: Andras Polgar <5525341+ruredi@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-10 21:30:06 +07:00

rianadesigner

2aec7afb93

sync: 161 product types, design system 与 CLI 资产同步，小猫咪预览页

- products.csv: 修复 No.90/No.65 数据，统一 161 产品类型
- colors.csv: 修复 Bitcoin DeFi Mobile 截断，同步 178 色板
- ui-reasoning.csv: 与 products 对齐
- core.py: 扩展 product 域关键词覆盖
- README/SKILL: 更新 161 reasoning rules、178 palettes 等数字
- 移除 stacks 下多框架 CSV，保留 react-native
- 新增 design.csv、_sync_all.py，CLI assets 全量同步
- 新增 preview/xiaomaomi-app.html 小猫咪 App 示例

Made-with: Cursor

2026-03-06 11:03:28 +08:00

Viet Tran

b2a05eceeb

feat: reorganize codebase with single source of truth + merge prompts into styles (#116 )

BREAKING CHANGES:
- Moved canonical data/scripts to src/ui-ux-pro-max/
- Removed duplicate folders (.codex/, .gemini/, .trae/, .codebuddy/, .continue/, skills/, .qoder/)
- CLI now uses template system instead of copying pre-built folders

New features:
- Merged prompts.csv into styles.csv with 4 new columns:
  - AI Prompt Keywords
  - CSS/Technical Keywords
  - Implementation Checklist
  - Design System Variables
- All 67 styles now have complete prompt data
- Added Astro stack (53 guidelines)
- Added 10 new 2025 UI trend styles

CLI changes:
- New template rendering system (cli/src/utils/template.ts)
- Reduced cli/assets from ~34MB to ~564KB
- Assets now contain only: data/, scripts/, templates/

File structure:
- src/ui-ux-pro-max/ - Single source of truth
- .claude/skills/ - Symlinks to src/ for development
- .shared/ - Symlink to src/ui-ux-pro-max/

Bumped CLI version: 2.1.3 → 2.2.0

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-22 22:05:41 +07:00

3 Commits