UI UX Pro Max: Design Rules Your AI Agent Can Search (GitHub, Scanned)

UI UX Pro Max is a design skill for coding agents. Instead of leaving colour, type and layout choices to the model's taste, it ships a local database of 79 UI styles (50 active), 192 colour palettes, 74 Google Fonts pairings, 34 landing page patterns, 25 chart types, 119 UX guidelines and stack-specific advice for 22 frameworks, from React and Tailwind to SwiftUI, Flutter and Jetpack Compose. A small Python script searches those CSV and JSON files with BM25 ranking, so the agent looks up rules rather than guessing.

Its main feature is a design system generator: ask for a landing page for a spa or a fintech dashboard and the skill matches the product type against 192 industry rules, then hands the agent a pattern, style, palette, typography, effects, anti-patterns to avoid and a pre-delivery checklist covering contrast, focus states, reduced motion and responsive breakpoints. In Claude Code, Cursor, Codex and most other agents it activates on its own when you ask for UI work; a few agents use a /ui-ux-pro-max slash command instead.

The repository has about 134,000 stars and 97 contributors and is MIT-licensed. It installs through a Claude Code plugin marketplace or through its own npm CLI, ui-ux-pro-max-cli, which sets it up for more than 20 agents. The authors also sell a premium version with brand, logo and asset generation; this open repository is the free basic version.

• Repository: github.com/nextlevelbuilder/ui-ux-pro-max-skill
• Licence: MIT (MIT License)
• Language: Python. Stars: 134K. Forks: 14.2K. Last push: Oct 8, 2026.
• Scan: safe, Oct 8, 2026, commit 1a2c459

Who it is for

Developers and founders who build interfaces with an AI agent and want more consistent, accessible results than the default purple-gradient landing page, without hiring a designer for every screen.

Getting started

1. Claude Code: add the marketplace

/plugin marketplace add nextlevelbuilder/ui-ux-pro-max-skill

2. Claude Code: install the skill

/plugin install ui-ux-pro-max@ui-ux-pro-max-skill

3. Other agents: install the CLI

npm install -g ui-ux-pro-max-cli

4. Then, in your project, pick your agent (cursor, codex, windsurf, gemini and more)

uipro init --ai cursor

The /plugin commands are typed inside Claude Code, not a shell. The search script needs Python 3, standard library only. The npm package is ui-ux-pro-max-cli; the README says the older uipro-cli releases are stale and should not be used.

Safety scan

We cloned nextlevelbuilder/ui-ux-pro-max-skill at commit 1a2c459 on Oct 8, 2026 and ran the checks described on the GitHub Tools page: credential patterns, decode-and-execute code, install-time scripts, committed binaries, risky CI workflows, every host the code talks to, known vulnerabilities in pinned dependencies, and project hygiene. A person read every hit. This is what we found.

• No secrets, no suspicious code patterns and no committed binaries across 681 files. A second, skill-specific pass for invisible Unicode, prompt-injection phrases, exfiltration hosts, credential paths and pipe-to-shell commands found nothing malicious.
• The CLI in cli/ only talks to api.github.com and github.com, to download the project's own release zips, and its lockfile has no known advisories. The core search script reads local data files and makes no network calls.
• All 45 known advisories (2 critical, 21 high) are in gallery/package-lock.json, a demo style-gallery website pinned to Next.js 14.2, including Next.js remote code execution advisories. The skill never uses it; it only matters if you run or deploy that gallery yourself, and you should not deploy it without upgrading Next.js first.
• The optional design skill includes logo, icon and corporate-identity generators (scripts/logo/generate.py and siblings) that call Google Gemini by default, or Atlas Cloud or MuAPI if you choose, using API keys you put in your own environment. They only run when you invoke them, and each image request is billed to you.
• Six workflows, none using pull_request_target. Security policy, licence, contributing guide and code of conduct present; no Dependabot or CodeQL. The one setup script, stack/scripts/setup.sh, is 32 lines that run npm install, Playwright's Chromium download and the project's own CLI, without sudo.

What the scanner counted

The raw findings

Every hit the scanner wrote out, with a link to the exact line at the scanned commit. Secrets candidates are redacted.

By the numbers

Lines by language: JSON 175.4K, Python 36.2K, Markdown 27.9K, JavaScript 4,599, TypeScript 4,347, HTML 1,627.

Questions

Is UI UX Pro Max free?

Yes. This repository is MIT-licensed and free, and the skill runs locally with Python 3. You still need a coding agent such as Claude Code, Cursor or Codex under its own pricing. The authors sell a separate premium version with brand identity, logo and asset generation, which you do not need for the features described here.

Does it send my project anywhere?

No. The skill searches local CSV and JSON files and the README states the search script makes no network calls. The CLI downloads release files from GitHub when installing. Only the optional logo and image generators contact outside services, and only with an API key you supply.

Which agents does it support?

Claude Code through the plugin marketplace, and through the uipro CLI more than 20 others, including Cursor, Windsurf, Codex, Gemini CLI, GitHub Copilot, Kiro, Roo Code, OpenCode, Continue and Trae, plus a universal .agents/skills/ install for any agent that reads the Agent Skills format.

This post is part of GitHub Tools, where every repository is cloned and scanned before it is written up. The scan is a snapshot of one commit on one day; the repository has moved on since, so check it before you install.