
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
codex-design-audit-skill
Advanced tools
A Codex skill for auditing website and frontend design quality.
A Codex skill for auditing website and frontend design quality.
Give Codex a URL, screenshot, localhost app, or repository frontend and it returns a structured UX/UI audit with scores, weak points, accessibility notes, frontend polish issues, prioritized fixes, and before/after re-audits.
autolanding-pagesaas-dashboardportfolioecommercemobile-firstaccessibility-heavygeneralInstall directly with npx:
npx codex-design-audit-skill
This installs the skill into:
~/.codex/skills/design-audit
Then restart Codex so it can discover the skill.
Or install the CLI globally:
npm install -g codex-design-audit-skill
codex-design-audit-skill
Clone the repository:
git clone https://github.com/Kappaemme-git/codex-design-audit-skill.git
Copy the skill into your Codex skills directory:
mkdir -p ~/.codex/skills
cp -R codex-design-audit-skill/design-audit ~/.codex/skills/design-audit
Restart Codex so it can discover the skill.
After installation, restart Codex and call the skill by name in your prompt.
Basic website audit:
Use $design-audit to evaluate the design and frontend quality of https://example.com
Audit a local app:
Use $design-audit to evaluate http://localhost:3000
Audit a repository frontend:
Use $design-audit to evaluate the frontend in this repository.
Use screenshots when you want stronger visual judgment:
Use $design-audit to evaluate these desktop and mobile screenshots.
Italian is supported:
Usa $design-audit per valutare il design e il frontend di https://example.com
The skill can infer the right preset automatically. If the target is ambiguous, it will ask you to choose one.
You can also specify a preset directly:
Use $design-audit with preset landing-page to evaluate https://example.com
Preset examples:
Use $design-audit with preset saas-dashboard to evaluate http://localhost:3000
Use $design-audit with preset accessibility-heavy to audit this page.
Use landing-page for marketing sites, saas-dashboard for product dashboards, portfolio for personal or agency sites, ecommerce for stores, mobile-first for mobile-heavy experiences, and accessibility-heavy when accessibility is the main concern.
Use re-audit mode after you apply fixes. The skill compares the new version with the previous audit and reports score deltas.
Use $design-audit to re-audit http://localhost:3000 and compare it with the previous audit.
Expected output includes:
$design-audit.Screenshots are recommended for stronger visual design judgment. Without screenshots or browser access, visual scoring is partially inferred from DOM, content, and available page data.
For best results, provide one of:
If Codex can open the page in a browser, the audit can evaluate layout, responsive behavior, visual hierarchy, console errors, and interaction states more reliably.
If Codex does not recognize $design-audit, restart Codex after installing the skill.
Check that the skill exists here:
ls ~/.codex/skills/design-audit
You should see:
SKILL.md
agents/
references/
MIT
FAQs
A Codex skill for auditing website and frontend design quality.
The npm package codex-design-audit-skill receives a total of 14 weekly downloads. As such, codex-design-audit-skill popularity was classified as not popular.
We found that codex-design-audit-skill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.