Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add openclaw/carapace --skill openclaw-design-auditgit clone --depth 1 https://github.com/openclaw/carapaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/openclaw/carapace/openclaw-design-audit)<a href="https://agentmods.dev/skills/openclaw/carapace/openclaw-design-audit"><img src="https://agentmods.dev/badge/skills/openclaw/carapace/openclaw-design-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/openclaw/carapace/openclaw-design-audit"><img src="https://agentmods.dev/badge/skills/openclaw/carapace/openclaw-design-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.00410 |
| Opus 5 | $0.00028 | $0.00205 |
| Sonnet 5 | $0.00011 | $0.00082 |
| Haiku 4.5 | $0.00006 | $0.00041 |
Grade A, and why
openclaw-design-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to openclaw-design-audit — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
OpenClaw Design Audit
Separate mechanical violations from judgment. Report suggestions as suggestions unless a documented rule makes them violations.
Workflow
- Read rubric.md and run every applicable category.
- Read the consumer's installed Carapace version and current commit SHA.
- Read the version-matched token contract and consumer adapters from the
installed product guidance skill:
openclaw-carapacefor new installs or theopenclaw-design-systemcompatibility alias for an upgraded lock. - Read the brand or marketing references when those categories apply.
- Run deterministic source checks before judgment-based review.
- Inspect representative rendered routes at desktop and mobile sizes.
- Check light and dark themes where supported.
- Emit the JSON and Markdown defined in report-format.md.
- When asked to fix findings, apply only narrow changes allowed by fix-policy.md.
- For scheduled ClawHub delivery, follow github-pr-delivery.md.
Evidence
Each finding must include:
- file and line
- category and severity
- stable rule ID
- concise remediation
- Carapace reference
- whether the finding is mechanical or judgment-based
Curation
- Include every error.
- Rank warnings before informational findings, then by affected-file count.
- Surface at most five non-error findings in the concise report.
- Summarize remaining non-error findings by count.
- Treat zero errors, zero warnings, and five or fewer informational findings as no significant drift.
- Never invent source locations or visual evidence.
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 46 lines · 56 tokens per session scan A e0023ef71701
openclaw-design-audit is a skill published in the GitHub repository openclaw/carapace (4 stars, last pushed 5d ago), licensed MIT. It adds 56 tokens to every session and 410 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to openclaw-design-audit, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
preline-mcp
Add, integrate, or build Preline UI components and blocks into HTML files via the Preline MCP server. Use when the user mentions "preline", says "/preline", asks to add a UI component, or requests a Preline block (a ready-made page section) using Preline UI.
preline-theme-generator
Generate, preview, save, or validate Preline theme CSS using the bundled local generator in this skill. Use when the user asks to create a new Preline theme, match a brand color, translate a mood into a theme, generate light and dark theme CSS, preview theme output without writing files, or review and fix generated…
tailwindcss-docs
Comprehensive Tailwind CSS v4 reference covering installation, all utility classes, responsive design, dark mode, customization, and advanced patterns. Use whenever the user mentions Tailwind CSS, utility classes, styling components, responsive layouts, custom themes, or needs help with any Tailwind-specific code…
popular-web-designs
54 real design systems (Stripe, Linear, Vercel) as HTML/CSS.
popular-web-designs
54 real design systems (Stripe, Linear, Vercel) as HTML/CSS.
designlang-tokens
Use when styling UI for cal.com — references the extracted design system tokens instead of inventing colors, spacing, or typography.