openclaw-design-audit SKILL.md skillA
openclaw-design-audit from openclaw/clawhub is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add openclaw/clawhub/openclaw-design-audit@git:20260724.ead9d94Pins git:20260724.ead9d94 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- openclaw/clawhub
- Path
.agents/skills/openclaw-design-audit/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260724.ead9d94, committed Jul 24, 2026
- First version recorded
- Jul 9, 2026
- Size
- 1,992 bytes
- Repository stars
- 9,549
- License
- MIT
Audit OpenClaw frontend code and rendered interfaces for Carapace drift, token misuse, primitive reimplementation, accessibility problems, responsive defects, and off-brand copy. Use for design reviews, compliance checks, or scheduled audit-and-fix workflows.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# OpenClaw Design Audit Separate mechanical violations from judgment. Report suggestions as suggestions unless a documented rule makes them violations. ## Workflow 1. Read [rubric.md](references/rubric.md) and run every applicable category. 2. Read the consumer's installed Carapace version and current commit SHA. 3. Read the version-matched token contract and consumer adapters from the installed product guidance skill: `openclaw-carapace` for new installs or the `openclaw-design-system` compatibility alias for an upgraded lock. 4. Read the brand or marketing references when those categories apply. 5. Run deterministic source checks before judgment-based review. 6. Inspect representative rendered routes at desktop and mobile sizes. 7. Check light and dark themes where supported. 8. Emit the JSON and Markdown defined in [report-format.md](references/report-format.md). 9. When asked to fix findings, apply only narrow changes allowed by [fix-policy.md](references/fix-policy.md). 10. For scheduled ClawHub delivery, follow [github-pr-delivery.md](references/github-pr-delivery.md). ## Evidence Each finding must include: - file and line - category and severity - stable rule ID …
Read the whole file at its exact version.
How to install
mdr add openclaw/clawhub/openclaw-design-audit@sha256:e0023ef717015106The line at the top of this page pins the label git:20260724.ead9d94, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_yworbscwp3g6vzzt)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Jul 9, 2026 and Jul 24, 2026, about one every 15 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260724.ead9d94 latest | 2026-07-24 | ead9d94 | 1,992 B | A | view · diff |
| git:20260709.de29369 | 2026-07-09 | de29369 | 1,965 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (1992 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
openclaw/clawhub · 9,549 stars · license MIT · pushed 2026-11-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_yworbscwp3g6vzzt GET https://markdownregistry.com/api/v1/resolve?ref=openclaw/clawhub/openclaw-design-audit GET https://markdownregistry.com/api/v1/blob/e0023ef717015106a1d0dd8b10a859e355583f52e5b626c559381e736283050d
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from openclaw/clawhub
Every file in openclaw/clawhub