Borrowing it
Nothing to install: this file belongs to kwakseongjae/oh-my-design. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/kwakseongjae/oh-my-design/main/.claude/skills/claude-design/SKILL.mdgit clone --depth 1 https://github.com/kwakseongjae/oh-my-designWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kwakseongjae/oh-my-design/claude-design)<a href="https://agentmods.dev/skills/kwakseongjae/oh-my-design/claude-design"><img src="https://agentmods.dev/badge/skills/kwakseongjae/oh-my-design/claude-design/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kwakseongjae/oh-my-design/claude-design"><img src="https://agentmods.dev/badge/skills/kwakseongjae/oh-my-design/claude-design.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 85 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 199 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00290 | $0.08901 |
| Opus 5 | $0.00145 | $0.04450 |
| Sonnet 5 | $0.00058 | $0.01780 |
| Haiku 4.5 | $0.00029 | $0.00890 |
Grade A, and why
claude-design scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 417 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Claude Design 컨텍스트 이관 스킬 (v2)
현재 코드베이스를 분석해 디자인 컨텍스트 브리프를 합성하고, 그것을 claude.ai/design 에 전달해 디자인을 생성한 뒤, 결과 링크를 터미널에 클릭 가능한 OSC-8 하이퍼링크로 돌려준다. 이 문서는 설명서가 아니라 런타임 Claude가 그대로 따르는 실행 플레이북이다.
v2의 핵심: ① 코드베이스 → 디자인 컨텍스트 이관(스택/토큰/컴포넌트/라우트/실제 카피/에셋/ 레포 링크), ② 컨텍스트 깊이를 매 실행 선택(lean ↔ comprehensive), ③ 렌더 스크린샷 캡처 안 함(기존 이미지 에셋 업로드는 가능), ④ 풀오토 + 핸드오프 폴백(claude.ai/design 상호작용이 막히면 알려진 확장 충돌 버그로 보고 즉시 수동 전환).
스크립트 경로 규칙: 런타임 cwd 는 보통 사용자의 프로젝트 폴더다(스킬 폴더가 아님). STEP -1에서 현재 채널·scope의 스킬 위치를
CLAUDE_DESIGN_SKILL_DIR절대경로로 한 번 해석한 뒤 모든 스크립트를 그 변수 아래에서 호출한다.--root스캔 대상은 cwd ($PWD), 즉 분석할 프로젝트 폴더다.
무엇을 하는가
- 코드베이스를 분석해 디자인 컨텍스트 브리프(스택, 디자인 토큰, 컴포넌트, 라우트, 실제 UI 카피, 큐레이션된 브랜드 에셋, git 레포 URL + 핵심 파일 경로)를 합성한다.
- 코드가 있으면 레포를 링크하고(브리프에 git URL + 핵심 파일 경로), 실제 브랜드 비주얼 에셋(로고/심볼/OG/히어로 등 — 문서 템플릿이 아님)을 큐레이션해 업로드한다.
- 대화 맥락 + 브리프 + 에셋 + URL 레퍼런스를 묶어 claude.ai/design 에 holistic 하게 전달하고, 결과 캔버스 URL 을 받아 터미널에 클릭 링크로 출력한다.
언제 쓰나 / 언제 안 쓰나
- 쓴다: "이 코드베이스를 클로드 디자인으로 옮겨줘", "코드 분석해서 claude design에 보내줘", "랜딩 디자인 뽑아줘" 처럼 코드/폴더 컨텍스트를 Claude Design 으로 넘길 때.
- 안 쓴다: 텍스트 디자인 조언/카피만 원할 때(브라우저 불필요), 코드로 UI 를 직접 구현할 때(일반 코딩 작업), 로그인/CAPTCHA 자동 돌파가 필요할 때(사용자에게 위임).
워크플로 (STEP -1 → 7)
각 단계의 MCP 도구는 ToolSearch 로 먼저 로드한 뒤 호출한다(
select:<tool_name>). 셀렉터/라벨은 확정이 아니라 검증할 힌트다. 같은 단계에서 2~3회 실패하면 멈추고 핸드오프하거나 사용자에게 묻는다(루프/삽질 금지).
STEP -1 — SKILL_DIR resolve (채널·project/global 공통)
하드코딩된 ~/.claude/skills를 쓰지 않는다. 아래를 한 번 실행하고 SKILL_DIR_OK를 확인한다:
PROJECT_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
CLAUDE_DESIGN_SKILL_DIR=""
for candidate in \
"$PROJECT_ROOT/.claude/skills/claude-design" \
"$PROJECT_ROOT/.agents/skills/claude-design" \
"$PROJECT_ROOT/.opencode/skills/claude-design" \
"$HOME/.claude/skills/claude-design" \
"$HOME/.agents/skills/claude-design" \
"$HOME/.config/opencode/skills/claude-design" \
"$(npm root 2>/dev/null)/oh-my-design-cli/skills/claude-design" \
"$(npm root -g 2>/dev/null)/oh-my-design-cli/skills/claude-design"
do
if [ -f "$candidate/SKILL.md" ] && [ -d "$candidate/scripts" ]; then
CLAUDE_DESIGN_SKILL_DIR="$candidate"
break
fi
done
[ -n "$CLAUDE_DESIGN_SKILL_DIR" ] && echo "SKILL_DIR_OK=$CLAUDE_DESIGN_SKILL_DIR" || echo "SKILL_DIR_MISSING"
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 417 lines · 290 tokens per session scan A 55c45639f0b4
claude-design is a skill published in the GitHub repository kwakseongjae/oh-my-design (500 stars, last pushed 5d ago), licensed MIT. It adds 290 tokens to every session and 8,901 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dembrandt
A TypeScript command-line tool that renders a web page with Playwright and examines its actual styles. It turns colours, typography, spacing, borders, shadows, animation curves, components, and breakpoints into structured design tokens.
extract-design
Extract the full design language from any website URL. Produces 8 output files including AI-optimized markdown, visual HTML preview, Tailwind config, React theme, shadcn/ui theme, Figma variables, W3C design tokens, and CSS variables. Also runs WCAG accessibility scoring. Use when user says 'extract design', 'get…
designlang-tokens
Use when styling UI for cal.com — references the extracted design system tokens instead of inventing colors, spacing, or typography.
brandmd
Extract a website's design system into a DESIGN.md file. Use when starting a new frontend project, rebuilding a site, or when the user wants AI-generated UI to match an existing brand.
montology
A repo's vocabulary as a database, enforced against the code by a tree-sitter scan — in every language it declares (Python, TypeScript/JS, Go, Rust, Swift, Java, Ruby, Elixir, C/C++, and more). Use BEFORE naming anything in code — a class, struct, function, type, module, table, column, endpoint, event, env var, CLI…
design-engineering
Premium design engineering skill for agentic workflows — produces high-end, distinctive UI designs using DESIGN.md as the portable contract across Pencil MCP (in-IDE canvas), Figma MCP (team handoff + design tokens), and Google Stitch (vibe exploration + AI generation). Enforces anti-generic principles, WCAG 2.2 AA…