ux-writing

Warn

Audited by Runlayer on Mar 5, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
88%
Files
23
Flagged
8
Chunks
35
Flagged Files (8)
ux-writing/.github/workflows/auto-rebuild-skill.ymlMEDIUM
88.1%

Malicious tool definition detected

run: ./build-skill.sh - name: Check for changes id: check_changes run: | if git diff --quiet dist/ux-writing-skill.zip; then echo "changed=false" >> $GITHUB_OUTPUT else echo "changed=true" >> $GITHUB_OUTPUT fi - name: Create Pull Request if: steps.check_changes.outputs.changed == 'true' run: | BRANCH_NAME="auto-rebuild-$(date +%s)" git config --local user.email "github-actions[bot]@users.noreply.github.com" git config --local user.name "github-actions[bot]" git checkout -b "$BRANCH_NAME" git add

ux-writing/docs/codex-figma-integration.mdMEDIUM
80.5%

Malicious tool definition detected

ux-writing/docs/claude-figma-integration.mdMEDIUM
79.8%

Malicious tool definition detected

### Option 1: Remote Server (Recommended) **Best for:** Quick setup, working from anywhere, no Figma desktop app needed **Requirements:** - Claude Code installed - Figma account (Starter, Professional, Organization, or Enterprise plan) - Internet connection **Setup Steps:** **Step 1: Install Figma MCP** 1. Open your terminal (Terminal on Mac, Command Prompt or PowerShell on Windows) 2. Copy and paste this command: ```bash claude mcp add --transport http figma https://mcp.figma.com/mcp ``` 3.

ux-writing/README.mdMEDIUM
78.8%

Tool passed security scan

Malicious tool definition detected

**📖 Full Claude Code setup guide:** [docs/claude-figma-integration.md](docs/claude-figma-integration.md) ### Quick Start with Codex 1. **Configure Codex MCP** - Add to `~/.codex/config.toml`: ```toml [features] rmcp_client = true [mcp_servers.figma] url = "https://mcp.figma.com/mcp" ``` 2.

ux-writing/.gitignoreMEDIUM
77.7%

Malicious tool definition detected

Tool: ux-writing/.gitignore Description: # Build output # Note: dist/ is committed to enable direct downloads from GitHub # The auto-rebuild workflow keeps it in sync when skill files change # dist/ # OS files .DS_Store

ux-writing/.github/workflows/main.ymlMEDIUM
76.4%

Malicious tool definition detected

cancel-in-progress: true jobs: code-review: runs-on: ubuntu-latest timeout-minutes: 15 # Skip draft PRs if: github.event.pull_request.draft == false steps: - uses: Factory-AI/droid-code-review@latest with: factory-api-key: ${{ secrets.FACTORY_API_KEY }} pr-number: ${{ github.event.pull_request.number }} pr-head-sha: ${{ github.event.pull_request.head.sha }}

ux-writing/build-skill.shLOW
65.4%

Tool passed security scan

ux-writing/.github/workflows/build-skill.ymlLOW
61.3%

Tool passed security scan

Passed Files (15)Click to expand
ux-writing/CONTRIBUTING.mdOK
43.2%

Tool passed security scan

ux-writing/SKILL.mdOK
39.1%

Tool passed security scan

ux-writing/references/accessibility-guidelines.mdOK
37.7%

Tool passed security scan

ux-writing/references/patterns-detailed.mdOK
34.4%

Tool passed security scan

ux-writing/CHANGELOG.mdOK
33.4%

Tool passed security scan

ux-writing/.gitattributesOK
24.8%

Tool passed security scan

ux-writing/index.htmlOK
24.4%

Tool passed security scan

ux-writing/VERSIONING.mdOK
18.0%

Tool passed security scan

ux-writing/LICENSEOK
16.7%

Tool passed security scan

ux-writing/references/content-usability-checklist.mdOK
9.3%

Tool passed security scan

ux-writing/examples/real-world-improvements.mdOK
9.0%

Tool passed security scan

ux-writing/templates/onboarding-flow-template.mdOK
8.3%

Tool passed security scan

ux-writing/templates/error-message-template.mdOK
3.1%

Tool passed security scan

ux-writing/references/voice-chart-template.mdOK
1.1%

Tool passed security scan

ux-writing/templates/empty-state-template.mdOK
0.5%

Tool passed security scan

Audit Metadata
Max File Score
88%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
23
Files Flagged
8
Chunks Analyzed
35
Analyzed
Mar 5, 2026, 08:16 AM
Security Audit — runlayer — ux-writing