website-theme-porter
Transfers visual themes from live websites to React/Tailwind CSS projects, ensuring accurate styling and documentation.
Install this skill
Security score
The website-theme-porter skill was audited on May 12, 2026 and we found 31 security issues across 2 threat categories, including 17 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 42 | ```bash |
Template literal with variable interpolation in command context
| 49 | All screenshot paths, JSON dumps, and theme docs in the steps below use `${ARTIFACTS}/` |
Template literal with variable interpolation in command context
| 97 | ```bash |
Template literal with variable interpolation in command context
| 134 | Save JSON output to `${ARTIFACTS}/tokens-css-vars.json`. |
Template literal with variable interpolation in command context
| 151 | border: s.border, boxShadow: s.boxShadow, padding: `${s.paddingTop} ${s.paddingRight}` }; |
Template literal with variable interpolation in command context
| 157 | Save to `${ARTIFACTS}/tokens-computed.json`. Manually assign tokens from these values in Stage 2. |
Template literal with variable interpolation in command context
| 158 | Note in `${ARTIFACTS}/theme/overview.md`: "source uses hardcoded values — no design token system detected". |
Template literal with variable interpolation in command context
| 192 | Save JSON output to `${ARTIFACTS}/tokens-typography.json`. |
Template literal with variable interpolation in command context
| 196 | ```bash |
Template literal with variable interpolation in command context
| 210 | ```bash |
Template literal with variable interpolation in command context
| 218 | Parse `${ARTIFACTS}/tokens-raw.txt` manually and map values to the token table in Stage 2. |
Template literal with variable interpolation in command context
| 219 | Note in `${ARTIFACTS}/theme/overview.md`: "extraction method: source inspection (curl)". |
Template literal with variable interpolation in command context
| 228 | 2. Elements → select `<html>` → Computed tab → filter for `--` → copy all custom properties to `${ARTIFACTS}/tokens-manual.txt` |
Template literal with variable interpolation in command context
| 230 | 4. Console: run JS snippets from `references/extraction.md` → paste output to `${ARTIFACTS}/tokens-computed.json` |
Template literal with variable interpolation in command context
| 231 | 5. Take screenshots of key sections (hero, nav, footer, mobile) and save under `${ARTIFACTS}/` |
Template literal with variable interpolation in command context
| 233 | Note in `${ARTIFACTS}/theme/overview.md`: "extraction method: manual DevTools inspection". |
Template literal with variable interpolation in command context
| 239 | Write the findings into `${ARTIFACTS}/theme/` before touching any code. |
Template literal with variable interpolation in command context
| 241 | ```bash |
Template literal with variable interpolation in command context
| 249 | | `${ARTIFACTS}/theme/colours.md` | All extracted colours with hex/HSL, semantic role, usage context | |
Template literal with variable interpolation in command context
| 250 | | `${ARTIFACTS}/theme/typography.md` | Font families, size scale, weight scale, line heights | |
Template literal with variable interpolation in command context
| 251 | | `${ARTIFACTS}/theme/spacing.md` | Padding/margin patterns, gap values, container widths | |
Template literal with variable interpolation in command context
| 252 | | `${ARTIFACTS}/theme/components.md` | Button, card, nav, footer styles — border-radius, shadows, borders | |
Template literal with variable interpolation in command context
| 253 | | `${ARTIFACTS}/theme/overview.md` | Summary, source URL, extraction date, method used, key decisions | |
Template literal with variable interpolation in command context
| 364 | ```bash |
Template literal with variable interpolation in command context
| 381 | ```bash |
Template literal with variable interpolation in command context
| 445 | ```bash |
External URL reference
| 331 | <link rel="preconnect" href="https://fonts.googleapis.com" /> |
External URL reference
| 332 | <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" /> |
External URL reference
| 365 | agent-browser diff url <TARGET_URL> http://localhost:5173 --screenshot "${ARTIFACTS}/diff-homepage.png" |
External URL reference
| 374 | playwright_browser_navigate(url: "http://localhost:5173") |
External URL reference
| 383 | agent-browser diff url <TARGET_URL> https://<your-preview>.vercel.app --screenshot "${ARTIFACTS}/diff-deployed.png" |