Skip to content
Back to skills

Space Huashu Design

ASecurity

Huashu Design (alchaincyf/huashu-design) for high-fidelity HTML design work - clickable prototypes and app mockups, slide decks with PDF/PPTX export, motion design and MP4/GIF export, infographics, design-direction variants and a five-dimension design critique. Use for design, UI/UX, mockup, visual-direction, redesign or design-review tasks; the operator's design policy pairs it with space-impeccable (impeccable for structure and the final polish/audit, huashu-design for the high-fidelity exe...

  • 10 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 16, 2026
ai-agentsgoreactapibackendsecurity

Works with

  • terminal
  • cli
  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned October 16, 2026

npx -y skills add oll4com/spaceapp --skill space-huashu-design --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Space Huashu Design?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Space Huashu Design
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/oll4com-space-huashu-design/badge)](https://www.skillsdirectory.com/skills/oll4com-space-huashu-design)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: space-huashu-design
description: Huashu Design (alchaincyf/huashu-design) for high-fidelity HTML design work - clickable prototypes and app mockups, slide decks with PDF/PPTX export, motion design and MP4/GIF export, infographics, design-direction variants and a five-dimension design critique. Use for design, UI/UX, mockup, visual-direction, redesign or design-review tasks; the operator's design policy pairs it with space-impeccable (impeccable for structure and the final polish/audit, huashu-design for the high-fidelity execution and variants). Not for production web apps or backends.
metadata:
  category: WORKFLOW
---

# Huashu Design

The full skill is [huashu-design/SKILL.md](huashu-design/SKILL.md) (written in Chinese). Read it first, then only the `references/` file it points to for the medium at hand: prototypes (`app-prototype.md`), slide decks (`slide-decks.md`, `editable-pptx.md`, `pptx-from-rendered-html.md`), motion and video (`animations.md`, `video-export.md`, `voiceover-pipeline.md`), critique (`critique-guide.md`), design directions (`design-styles.md`, `design-context.md`).

Core method: every new design starts with three distinct directions for the user to choose from; only the chosen one is taken to high fidelity, verified in a browser and then exported.

## In Space

Repository and operator instructions (`AGENTS.md`, `/etc/AGENTS.md`) take precedence over this skill.

- **Operator design policy (2026-04-28).** For design/UI/UX/mockup/visual-direction/review work (not Figma-native tasks) use `space-impeccable` for structure and quality gates, this skill for high-fidelity execution and variants, then `space-impeccable` again for the final polish and audit.
- **SpaceApp's own UI.** Prototypes are references, not code to paste: ship UI through the repository's React components and tests. All UI strings stay English, toggles use `SpaceToggle` (no checkboxes), and changes touching Warm, room switching or terminal resize keep their user-protected rules.
- **Language.** Reply to the user in the user's language even though the skill text is Chinese; write deliverable copy in the language the brief asks for.
- **Where files go.** Work and exports go to `/var/lib/spaceapp-user/agent-workspace/active/YYYYMMDD-HHMM-<topic>/` (scratch) or `.../reports/...`, never into the repository unless asked. Publish to Agent Files only when the user explicitly asks for the file.
- **Local only by default.** The core pipeline (HTML, browser render, PDF/PPTX/MP4 export) is local. The cloud helpers in `huashu-design/scripts/cloud/` (Volcengine video review, Doubao TTS) send content to ByteDance APIs and need the user's own keys: never run them, pass `--yes` or set `HUASHU_CLOUD_OK=1` without the operator's explicit consent for that run. See [huashu-design/SECURITY.md](huashu-design/SECURITY.md).
- **Tooling.** Use the browser and Playwright already available to the session; do not `npm install` the skill's `package.json` dependencies into a repository or globally without consent, and keep any install inside the task's scratch directory.
- **Not vendored.** The background music, sound effects (`assets/bgm-*.mp3`, `assets/sfx/**`) and showcase images (~31 MB) are not included. When a video task needs them, download only the needed files from the upstream commit in [UPSTREAM.md](UPSTREAM.md) into the task's scratch directory.

Source and license: [UPSTREAM.md](UPSTREAM.md).

Files in this skill

  • SKILL.md3.4 KB
  • UPSTREAM.md2.5 KB
  • huashu-design/LICENSE1.1 KB
  • huashu-design/README.en.md18.3 KB
  • huashu-design/README.md19.3 KB
  • huashu-design/SECURITY.md5.1 KB
  • huashu-design/SKILL.md63.7 KB
  • huashu-design/assets/android_frame.jsx4.4 KB
  • huashu-design/assets/animations.jsx10.3 KB
  • huashu-design/assets/banner.svg9.3 KB
  • huashu-design/assets/browser_window.jsx3.9 KB
  • huashu-design/assets/cursor.jsx14.1 KB
  • huashu-design/assets/deck_index.html20.8 KB
  • huashu-design/assets/deck_stage.js11.4 KB
  • huashu-design/assets/design_canvas.jsx5.1 KB
  • huashu-design/assets/director-notes-samples/launch-film-30s-sample.md78.3 KB
  • huashu-design/assets/ios_frame.jsx4.6 KB
  • huashu-design/assets/macos_window.jsx2.5 KB
  • huashu-design/assets/narration_stage.jsx20.2 KB
  • huashu-design/assets/personal-asset-index.example.json1.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.