Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art...
Security Analysis
high confidenceThe skill is an instruction-only design helper that asks the agent to produce a design manifesto and visual outputs and its requests (no creds, no installs) are consistent with that purpose.
Name/description (create visual art/posters) align with the provided assets and instructions. The repository contains many font license files which are appropriate for a design skill and explain how typography may be used. There are no unrelated credentials, binaries, or config paths requested.
SKILL.md is prescriptive about creating a 4–6 paragraph 'visual philosophy' and then producing .md, .pdf, and .png artifacts. It instructs the agent to repeatedly emphasize 'expert craftsmanship' (explicitly asking for repeated phrases such as 'meticulously crafted' and 'painstaking attention'), which is unusual stylistically but consistent with the design purpose. The instructions do not ask the agent to read unrelated files, access environment variables, call external endpoints, or exfiltrate data.
No install spec and no code files—this is instruction-only. Nothing will be downloaded or written to disk by the skill itself. This minimizes installation risk.
The skill requests no environment variables, credentials, or config paths. The included font license texts are legitimate for font usage; there are no secret-like env vars or unrelated service keys.
always:false and user-invocable:true. The skill does not request permanent presence or elevated privileges. Autonomous invocation is allowed (platform default) but not combined with other red flags here.
Guidance
This skill appears internally consistent and low-risk: it contains only instructions and font license text files (no code, no installers, no secrets). A few things to consider before installing: 1) Source and homepage are unknown and registry owner IDs in metadata differ from the header — that is a minor provenance inconsistency you may want to verify if provenance matters to you. 2) The SKILL.md strongly enforces stylistic demands (repeating phrases about 'meticulously crafted' and similar wording); that is a creative constraint rather than a security issue but may affect output tone. 3) The included font files are covered by open font licenses (OFL), but if you plan to redistribute generated assets commercially, double-check the specific font licensing requirements in the included LICENSE/OFL texts. 4) Because the skill is instruction-only, it cannot itself execute network calls or write code — however the agent that invokes the skill may still use its own rendering tools to create PDFs/PNGs; make sure those rendering tools run in a secure environment. Overall the package is coherent with its claimed purpose.
Latest Release
v1.0.0
Initial publish
Popular Skills
Published by @theo-jobs on ClawHub
