
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@sketch-hq/sketch-assistant-cli
Advanced tools
Sketch Assistants Node command-line utility.
You can use this utility to run Assistants against Sketch files outside of Sketch.
It can run whichever Assistants have been added to the file by Sketch, or run a custom set of Assistants passed in on the command line.
npm i -g @sketch-hq/sketch-assistant-cli
Or,
yarn global add @sketch-hq/sketch-assistant-cli
The sketch-assistants command will then be available. See below for usage instructions.
Alternatively the CLI will work when installed locally to a project too.
yarn add @sketch-hq/sketch-assistant-cli
The sketch-assistants command will then be available to use in your package.json scripts.
## Local development
Setup the monorepo according to the Getting Started instructions, and then in this folder:
yarn build
./bin/cli.js <args>
Run a Sketch file's configured Assistants.
sketch-assistants "./path/to/file.sketch"
Run multiple files:
sketch-assistants "./path/to/file-1.sketch" "./path/to/file-2.sketch"
Or use globs to run all Sketch files that match a pattern:
sketch-assistants "./**/*.sketch"
--jsonSwitch from human-readable output to JSON. Example:
sketch-assistants --json "./path/to/file.sketch"
--clear-cacheWhen Assistants are installed before a run, they are cached in a temporary folder to make future runs faster. Pass this flag to delete the cache folder.
--workspaceOptionally supply and overwrite the Assistant workspace configuration within the Sketch file(s) with your own. This can be useful for running Assistants against a file that haven't yet been setup with Assistants in the Sketch app.
sketch-assistants --workspace=./workspace.json "./path/to/file.sketch"
The data shape of the workspace itself is essentially a package.json, with the dependencies section indicating the active Assistants. The workspace JSON example below activates two Assistants:
{
"dependencies": {
"@sketch-hq/sketch-tidy-assistant": "latest",
"@sketch-hq/sketch-naming-conventions-assistant": "latest"
}
}
--assistantOptionally supply a custom Assistant to use on the files. This is an Assistant defined entirely in JSON. Assistants to extend, as well as a custom configuration of object can be supplied.
sketch-assistants --assistant=./assistant.json "./path/to/file.sketch"
Example Assistant definition in JSON:
{
"name": "max-3",
"dependencies": {
"@sketch-hq/sketch-core-assistant": "latest"
},
"assistant": {
"extends": ["@sketch-hq/sketch-core-assistant"],
"config": {
"rules": {
"@sketch-hq/sketch-core-assistant/groups-max-layers": {
"active": true,
"maxLayers": 3,
"skipClasses": []
}
}
}
}
}
FAQs
Sketch Assistants Node command-line utility.
The npm package @sketch-hq/sketch-assistant-cli receives a total of 34 weekly downloads. As such, @sketch-hq/sketch-assistant-cli popularity was classified as not popular.
We found that @sketch-hq/sketch-assistant-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.