Borrowing it
Nothing to install: this file belongs to eiriksgata/wc3-map-ts-template. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/eiriksgata/wc3-map-ts-template/main/.cursor/skills/ui-designer-control/SKILL.mdgit clone --depth 1 https://github.com/eiriksgata/wc3-map-ts-templateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/eiriksgata/wc3-map-ts-template/ui-designer-control)<a href="https://agentmods.dev/skills/eiriksgata/wc3-map-ts-template/ui-designer-control"><img src="https://agentmods.dev/badge/skills/eiriksgata/wc3-map-ts-template/ui-designer-control/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/eiriksgata/wc3-map-ts-template/ui-designer-control"><img src="https://agentmods.dev/badge/skills/eiriksgata/wc3-map-ts-template/ui-designer-control.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 9 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Agent Snooping · line 25 Skill accesses MCP server configuration files (mcp.json). MCP configs contain server URLs, authentication tokens, and tool definitions — reading them allows the skill to discover and potentially abuse other tool integrations.Fix: Remove all code or instructions that read MCP configuration files (mcp.json). MCP server details should be managed by the agent runtime, not read by individual skills.
- high Agent Snooping · line 25 Skill accesses MCP server configuration files (mcp.json). MCP configs contain server URLs, authentication tokens, and tool definitions — reading them allows the skill to discover and potentially abuse other tool integrations.Fix: Remove all code or instructions that read MCP configuration files (mcp.json). MCP server details should be managed by the agent runtime, not read by individual skills.
- medium Prompt Injection · line 47 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Prompt Injection · line 56 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Prompt Injection · line 59 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Prompt Injection · line 60 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Prompt Injection · line 65 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Prompt Injection · line 80 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Prompt Injection · line 219 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00124 | $0.04747 |
| Opus 5 | $0.00062 | $0.02374 |
| Sonnet 5 | $0.00025 | $0.00949 |
| Haiku 4.5 | $0.00012 | $0.00475 |
Grade A, and why
ui-designer-control scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 289 lines — stays where its author put it; the contents beside it link to each section on GitHub.
UI Designer Control Skill
让任意支持 MCP 的 Agent（Claude Code / Cursor / Copilot…）通过本地 HTTP MCP 稳定操控
ui-designer桌面端：打开项目 → 批量改画布 → 校验 → 导出代码 → 保存，并能和wc3-map-ts-template地图仓形成 AI 闭环。
1. 何时使用
在遇到下列任一情况时加载并遵循本 Skill：
- 用户要求 AI 设计 / 修改 WC3 地图 UI（按钮、面板、文本、模型）。
- 用户明确提到
ui-designer、frame-ui-designer、*.uiproj、*.ui.json、war3mapImported/。 - 需要通过 MCP 工具
ui_open_project/ui_apply_actions/ui_export_code/ui_runtime_*等任何ui_前缀工具。 - 需要在
wc3-map-ts-template中走yarn ui:pull / ui:check / ui:push闭环。
2. 运行时前提（硬性要求）
被自动化控制的 ui-designer 进程必须是 Tauri 桌面端。不要把仅浏览器的 yarn dev 当作 MCP 目标：Web 模式缺少或与桌面不一致的能力（原生文件/对话框、资源导入等）会导致工具"成功"但与真实场景不符。
- 启动命令：在
ui-designer仓库根执行yarn tauri:dev。默认自动拉起内嵌 Rust MCP HTTP 服务（rmcpStreamable HTTP），监听127.0.0.1:8765。关闭自动启动可设UI_DESIGNER_AUTO_START_MCP=false。 - MCP 连接 URL（
/与/mcp等价）：- Cursor / Copilot
mcp.json：{ "uiDesigner": { "type": "http", "url": "http://127.0.0.1:8765/" } } - 健康检查：
GET http://127.0.0.1:8765/health应返回data.mcp: "rust-rmcp"。
- Cursor / Copilot
- 运行态桥（
ui_runtime_*）走 Tauri 事件，不再使用 Node 子进程或文件队列。所以若 Tauri 窗口未打开，ui_runtime_*会超时。
准入校验：首次调用前，先发起 ui_get_snapshot；若返回 ok:false 或连接失败，先让用户运行 yarn tauri:dev 再继续。
3. 工具清单（MCP Tools）
所有工具返回统一 envelope：
{
"ok": true,
"data": {},
"diagnostics": [],
"nextHints": [],
"protocol": { "mcpProtocolVersion": "1.0.0", "pluginSchemaVersion": "1.0.0" }
}
3.1 项目生命周期
| 工具 | 参数 | 说明 |
|---|---|---|
ui_open_project |
projectPath: string (绝对路径到 *.uiproj) |
打开并加载项目。返回 data 为项目快照（widgets / resources / animations / settings）。 |
ui_save_project |
projectPath?: string |
保存到磁盘；不传则保存到当前路径。 |
ui_get_snapshot |
— | 获取引擎侧当前快照，用于读取 widget.id / parentId 做后续动作。 |
ui_import_from_sidecar |
path: string (绝对路径到 *.ui.json) |
从 wc3-template-export 生成的 sidecar 反向导入；仅接受 generator == "wc3-template-export" 的 sidecar。 |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 289 lines · 124 tokens per session scan A 5922ff5e5409
ui-designer-control is a skill published in the GitHub repository eiriksgata/wc3-map-ts-template (25 stars, last pushed 10d ago), licensed MIT. It adds 124 tokens to every session and 4,747 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
codex-interactive-capability-map
Turn a long-form article, thread, memo, or product narrative into a compact clickable capability map with a workflow loop, use-case matrix, and responsive detail panel.
roblox-ui
Build production Roblox interfaces with ScreenGui/PlayerGui lifecycle, responsive UDim2 layouts, safe insets, reusable editable Instances, cross-device input and selection, restrained motion, cleanup, and multi-viewport verification. Use for Roblox HUDs, inventories, shops, settings, ability bars, ScrollingFrames…
game-ui-ux
Design and build game UI/UX — HUDs, menus, and overlays — that survive every screen: anchor- based responsive layout, resolution/aspect scaling and safe areas, keyboard/gamepad focus navigation, a screen/menu state stack, and event-driven (not polled) HUD updates. Engine- neutral patterns that pair with the detected…
ux-design
Guided, section-by-section UX spec authoring for a screen, flow, or HUD. Reads game concept, player journey, and relevant GDDs to provide context-aware design guidance. Produces ux-spec.md (per screen/flow) or hud-design.md using the studio templates.
ux-review
Validates a UX spec, HUD design, or interaction pattern library for completeness, accessibility compliance, GDD alignment, and implementation readiness. Produces APPROVED / NEEDS REVISION / MAJOR REVISION NEEDED verdict with specific gaps.
unity-inspector
Advise on Unity Inspector authoring UX.