graphic-skillsSAFE
Graphic design skills for Codex and Claude Code: memorize a brand, interview a new one into existence, explore routes, build type, logo and color systems (Thai-ready), prompt Codex image generation from your brand, then brief, make, and critique graphics.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Design skills for Codex and Claude Code that work the way a studio does: learn the brand first, interview you until it is clear, show real options, build a system, then make and critique every graphic against it. Thai-ready. อ่านภาษาไทย
On Codex, the skills also drive the built-in image generator ($imagegen): they write the prompt from your brand memory, so generated pictures carry your palette, light, and guardrails.
The shape follows mattpocock/skills: commands you type (/grill-brand), plus a few reference skills the agent loads by itself.
Install
Pick one method per agent. Installing two ways gives you every skill twice.
Codex or any agent, with the `skills` installer (needs Node):
npx skills@latest add whanoftheworld/graphic-skills -g -a codex # Claude Code instead: -a claude-code
Claude Code plugin:
claude plugin marketplace add whanoftheworld/graphic-skills claude plugin install graphic-skills@whanoftheworld
Codex plugin (written from the Codex docs; I could not run Codex while building this, so treat it as untested):
codex plugin marketplace add whanoftheworld/graphic-skills
By hand: copy the folders in skills/ into ~/.agents/skills (Codex, user scope) or ~/.claude/skills (Claude Code). Codex also reads .agents/skills inside a repo.
Restart the agent if the skills do not appear.
Use
Type a command. In Claude Code it is /grill-brand; in Codex it is $grill-brand or pick it from /skills (per the Codex skills docs; the Codex app may also list it as a slash command).
- I have a logo, fonts, or past work →
/brand-intake - I only have a business and a feeling →
/grill-brand - Not sure →
/ask-designer
Everything the commands learn goes into one file, brand/BRAND.md (the brand memory), plus tokens.json and `t
342d872d0e2eOBSERVED · 2026-10-13Install
Commands as the repository documents them. They are shown, not run.
claude plugin install graphic-skills@whanoftheworld
claude plugin install graphic-skills@whanoftheworld
Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned | |
| codex | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: ask-designer description: Ask which graphic skill or flow fits your situation. A router over the skills in this repo. disable-model-invocation: true --- # Ask designer You don't remember every command, so ask. Before stating what a command does or telling the human to skip a step, read that skill's SKILL.md; the summaries here orient you. Studios converge on one order of work (see [the research notes](https://github.com/whanoftheworld/graphic-skills/blob/main/docs/research.md)): **listen, define, explore routes, build the system, apply, critique**, looping back when later work exposes an earlier gap. The commands follow it, and the **brand memory** (`brand/BRAND.md`) is the baton they pass. Every command reads it and writes to it, so you can `/clear` the context between commands without losing anything. ## Where are you? | Your situation | Start with | | --- | --- | | I have a logo, fonts, colors, or past work | `/brand-intake` | | I only have a business and a feeling | `/grill-brand` | | My brand is a mess or inconsistent | `/brand-intake` (it audits, and you pick the canonical version of anything inconsistent), then `/brand-system` | | The brand is clear and I need a look | `/design-routes` (needs strategy and personality decided; `/grill-brand` fills them) | | I need a photo, illustration, texture, or background | `/brand-image`, then `/make-graphic` places it | | I need a post, poster, or banner now | `/design-brief`, then `/make-graphic` | | Is this design any good? | `/design-critique` | ## The main flow: brand from nothing to system 1. **Ground the brand.** `/brand-intake` memorizes and audits what exists. `/grill-brand` interviews you about what is missing (purpose, audience, onlyness, personality, the logos and fonts you love and why). With assets and gaps, run intake first. 2. **Explore routes.** `/design-routes` shows three genuinely different directions side by side; you pick or mix one. 3. **Build the pieces.** Each refines the chosen route, and the order is a recommendation, not a rule: - `/type-system` first, because a wordmark depends on the typeface. - `/logo-lab` next: reason for a mark, concepts, thumbnails, the gauntlet, the logo kit. - `/color-system` last, because color is judged best beside the logo, and every text pair is proven by script. 4. **Compile the system.** `/brand-system` turns the decisions into tokens, a CSS theme, a brand board, and written guidelines. ## The apply loop: every graphic after that 1. `/design-brief` settles the message, viewer, format, and copy. 2. `/brand-image` when the graphic needs a picture. On Codex the built-in image generator (`$imagegen`) makes it, prompted from your brand memory so palette, light, and guardrails carry over. 3. `/make-graphic` builds the layout from tokens, places the image, adds the exact logo and type (which a generator cannot draw reliably), renders, and gates it. 4. `/design-critique` reviews the result with evidence. System-level findings send you back to step 3 or 4 of the main flow. ## Underneath Three model-invoked skills run beneath the commands, and the agent loads them on its own: **brand-context** (reads the brand memory before any graphic work), **design-craft** (hierarchy, typography with Thai, color, logo craft, image prompting, plus the contrast and palette scripts), and **design-grilling** (the interview method behind `/grill-brand`, `/color-system`, `/type-system`, and `/design-brief`). Type their names directly only when the words, not the process, are the problem. ## When the loop goes back Design is not linear. A new competitor, a failed gauntlet, or a critique finding can reopen an earlier decision: set that pillar's status back to `open` in the brand memory, rerun its command, and let `/brand-system` recompile.
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- declared (1 observation(s))
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
342d872d0e2efull audit observations/trust-audit/skill/whanoftheworld__graphic-skills.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-13 | 342d872d0e2e | SAFE | B | 89 | first audit |
Questions
What does the graphic-skills skill do?
Graphic design skills for Codex and Claude Code: memorize a brand, interview a new one into existence, explore routes, build type, logo and color systems (Thai-ready), prompt Codex image generation from your brand, then brief, make, and critique graphics.
Is graphic-skills safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can graphic-skills access on my machine?
The audit observed that it runs shell commands. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does graphic-skills work with?
Its documentation mentions claude-code and codex. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (342d872d0e2e), read on 2026-10-13. The repository is watched, and a new audit runs when it changes — this is the first audit.