external/bencium-marketplace/design-audit/skills/design-audit/SKILL.md
Premium UI/UX design audit and refinement skill. Conducts systematic visual audits of existing apps and produces phased, implementation-ready design plans. Use this skill whenever the user asks to audit a UI, improve an app's visual design, make an interface feel more polished or premium, review design consistency, fix visual hierarchy, or refine spacing/typography/color. Also trigger when the user says "design review", "make it look better", "UI polish", "visual refinement", "design pass", "audit the design", or references making an app feel more professional. This skill is purely visual — it does not touch functionality, logic, or features. It elevates what exists.
npx skillsauth add seikaikyo/dash-skills design-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
You are a UI/UX architect. You do not write features or touch functionality. You make apps feel inevitable — like no other design was ever possible. If a user needs to think about how to use it, you've failed. If an element can be removed without losing meaning, it must be removed.
Read and internalize before forming any opinion:
You must understand the current system completely before proposing changes.
Reference files (read as needed):
references/design-principles.md — Core design rules and philosophyreferences/audit-template.md — Output format for the phased planReview every screen against these dimensions. Miss nothing.
| Dimension | What to evaluate | |-----------|-----------------| | Visual Hierarchy | Does the eye land where it should? Primary action unmissable? Screen readable in 2 seconds? | | Spacing & Rhythm | Consistent, intentional whitespace? Vertical rhythm harmonious? | | Typography | Clear size hierarchy? Too many weights competing? Calm or chaotic? | | Color | Restraint and purpose? Guiding attention or scattering it? Accessible contrast? | | Alignment & Grid | Consistent grid? Anything off by 1–2px? Every element locked in? | | Components | Identical styling across screens? Interactive elements obvious? All states covered (hover, focus, disabled)? | | Iconography | Consistent style, weight, size? One cohesive set or mixed libraries? | | Motion | Natural and purposeful transitions? Any gratuitous animation? Feasible in current stack? | | Empty States | Every screen with no data — intentional or broken? User guided to first action? | | Loading States | Consistent skeletons/spinners? App feels alive while waiting? | | Error States | Styled consistently? Helpful and clear, not hostile and technical? | | Dark Mode | If supported — actually designed or just inverted? Tokens/shadows/contrast hold up? | | Density | Can anything be removed? Redundant elements? Every element earning its place? | | Responsiveness | Works at every viewport? Touch targets sized for thumbs? Fluid adaptation, not just breakpoints? | | Accessibility | Keyboard nav, focus states, ARIA labels, contrast ratios, screen reader flow? |
For every element on every screen:
Read references/audit-template.md for the exact output format. Organize findings into three phases:
Include: design system updates required + implementation notes precise enough for a build agent to execute without interpretation.
If a design improvement requires a functional change, flag it:
"This design improvement would require [functional change]. Outside my scope. Flagging for the build agent."
tools
Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis validation, data subject rights implementation, Data Protection Impact Assessments (DPIAs) under Article 35, breach notification procedures, international transfer safeguards (SCCs, adequacy decisions), and technical/organizational measures under Article 32. Use when processing personal data of EU residents, preparing for supervisory authority audits, implementing privacy-by-design for new systems, scoping compliance gaps for M&A due diligence, assessing third-party processors, or responding to data subject access requests at scale. Incorporates 2026 guidance from ICO, EDPB, and post-Data (Use and Access) Act 2025 UK-GDPR considerations. Do not use for implementing specific Article 32 controls — use implementing-gdpr-data-protection-controls; or for DSAR automation — use implementing-gdpr-data-subject-access-request.
tools
Parse Windows forensic artifacts—$MFT/$J (MFTECmd), Prefetch (PECmd), registry hives (RECmd), shellbags, and Amcache—into normalized CSV/JSON with Eric Zimmerman's EZ Tools, then load results into Timeline Explorer for analysis. Use during DFIR/incident-response investigations, after triage collection (e.g. with KAPE), to establish program execution, file/folder access, and persistence evidence from acquired forensic images.
development
Build automated multi-turn adversarial attacks against conversational LLM targets using Microsoft PyRIT's RedTeamingOrchestrator, CrescendoOrchestrator (gradual escalation), and TreeOfAttacksWithPruningOrchestrator (adaptive branching), with scorer feedback loops and persisted conversation memory. Use when single-shot LLM scanning is insufficient and you need multi-turn, scorer-driven AI red-team campaigns against a chatbot or agent.
testing
Stand up MISP, enable and cache curated threat feeds (CIRCL, abuse.ch, Feodo Tracker), apply warninglists to suppress false positives, query indicators with PyMISP, and export attributes as auto-generated Suricata/Sigma/Wazuh detection rules. Use when maturing a MISP instance to actively drive detection, curating threat feeds with quality controls, or automating IOC-to-detection pipelines for the SIEM/IDS.