{
  "schemaVersion": 1,
  "type": "resource",
  "id": "ui-skills",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "limited",
    "modes": [
      "http",
      "browser",
      "source-review"
    ],
    "summary": "Public search returned nine accessibility-related links. Pinned skill text was inspected as data; no skill was installed or asked to edit a project.",
    "reportUrl": "/design-evaluations/resource-ui-skills.json",
    "identity": {
      "target": "https://github.com/ibelick/ui-skills",
      "version": "747a47fdb6b405e5cbf268f7c410123930455157",
      "integrity": "sha256:fea3322f36d58fdafafce2aef56e4556dd2ac7b20876b7dff7d8be7f25fa597f"
    },
    "environment": [
      "Chromium 155.0.8059.82 on Windows; fresh temporary profile and fresh account-free contexts.",
      "Public HTTPS GET/HEAD requests only; telemetry/auth routes and WebSockets blocked. No account storage or credential environment variables."
    ],
    "tests": [
      {
        "name": "Public document and DOM",
        "mode": "browser",
        "method": "Fresh Chromium GET, then inspect rendered controls after hydration delay",
        "result": "pass",
        "observation": "HTTP 200; 4 captured button labels; 1 inputs; 0 canvases."
      },
      {
        "name": "Skill search",
        "mode": "browser",
        "method": "Open search, type accessibility and inspect result links",
        "result": "pass",
        "observation": "Search dialog returned 9 visible links for the synthetic query; no skill was invoked."
      }
    ],
    "security": {
      "scope": "Passive inspection of the public response headers, requested hosts and the named browser sample. Also inspected the named pinned skill text as untrusted data. No active exploitation, authenticated permissions test or complete security audit.",
      "findings": [
        {
          "level": "caution",
          "basis": "documented",
          "title": "Skill text can authorize project changes only through its host",
          "detail": "The reviewed accessibility and component-canvas instructions describe code review, edits and preview boundaries. Their usefulness and safety still depend on the agent permissions and the project supplied to it."
        }
      ],
      "limits": [
        "No authenticated workspace, private content, production backend permissions or data-retention verification.",
        "Search functionality does not establish that an agent will find or repair accessibility defects."
      ]
    },
    "practicalCaveats": [
      "Treat the selected SKILL.md as third-party instructions and review its requested tools before adding it to a host.",
      "Pin and recheck the selected version or sample before adoption; the observations apply only to the scope and date shown."
    ],
    "limits": [
      "Search functionality does not establish that an agent will find or repair accessibility defects.",
      "Fresh-browser restrictions can affect external assets and hydration. Initial failed selectors and limited probes remain in the evidence; they are not blanket product failures."
    ],
    "sources": [
      {
        "label": "Primary public resource",
        "url": "https://www.ui-skills.com/"
      },
      {
        "label": "Pinned upstream revision",
        "url": "https://github.com/ibelick/ui-skills/tree/747a47fdb6b405e5cbf268f7c410123930455157"
      }
    ]
  }
}