Install
$ agentstack add skill-skryx-l-a-project-kit-website ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
website — the site builder sub-skill
What this sub-skill is for
Standing up a real, deployable website project: marketing/business site, landing page, portfolio, blog, agency site, or any public web UI. It mirrors content-driven school/organisation sites — content-driven, privacy-first, accessible, German-facing. It is loaded by new-project routing and composes cleanly into saas when a site is one layer of a larger product.
Mandatory grill-questions (fold into the Definition of Ready)
Before a single component is built, these MUST be locked:
- Purpose & primary CTA — what one action should a visitor take (book / buy / contact / read)?
- Audience & language — who, and which locale(s)? Default German UI / English code; confirm if multilingual (i18n now or later).
- Content source — does the user supply copy/photos, or do we draft? Real photos vs. placeholder? Photo consent for any people shown.
- Brand tokens — colours, type, logo. If none, design-start chains the inspiration skills to derive them.
- Pages & content model — page list + which content is a collection (blog posts, team, services) vs. one-off.
- CMS need — will a non-dev edit content? If yes, git-based CMS (Decap/Sveltia) vs. none.
- Legal pages — Impressum + Datenschutzerklärung required (German sites: almost always). Cookie/consent banner needed?
- Hosting & domain — Netlify default; custom domain owned? DNS access?
- Accessibility bar — confirm BITV/WCAG-AA as the non-negotiable target (public-sector → BITV 2.0).
- No-emoji rule — restate: typographic symbols only in the UI, never emoji.
Project sub-agents to generate (into .claude/agents/)
- frontend-screen (delegate-by-default) — builds a single page/section to spec from tokens; owns layout, responsive, motion. Chain
frontend-design+magic. - accessibility-reviewer (delegate-by-default) — audits each screen against BITV/WCAG-AA: contrast, focus order, alt text, semantic landmarks, keyboard nav; blocks merge on failures.
- content-collection-author — drafts/structures content-collection entries (blog, services, team) in the project's German voice with frontmatter validation.
- seo-aeo-agent — fills meta/OpenGraph, sitemap, schema.org JSON-LD, and
/llms.txt; chains theweb-aeoskill. - privacy-compliance-checker — verifies no external CDN/Google-Fonts calls, self-hosted assets only, Impressum/Datenschutz present, consent handled.
Tools / CLIs / MCP / skills needed
Check in environment-readiness; offer install, never auto-install:
- Node 20+ / npm or pnpm, Astro 5 (
npm create astro@latest).astro,viteon PATH. - Netlify CLI (
npm i -g netlify-cli) for deploy + preview. - MCP:
claude-in-chromeorplaywrightfor live visual/a11y checks;Figmaif a design file exists;magic(21st.dev) for UI component scaffolds. - CHAIN these GLOBAL skills automatically at design start (per the user's standing rule, no asking):
framer-inspiration→design-harvest→frontend-design; andweb-aeoonce content exists. Usehiggsfield-generateonly for original imagery the user explicitly wants.
File / asset nudges (on top of the base set)
Beyond CLAUDE.md, PROJEKT_.md, TASKS.md, DONE.md, README, .claude/:
src/styles/tokens.css— the single source of design tokens (colour/type/spacing).src/content/— content collections +config.tsschemas.src/fonts/— self-hosted font files (woff2) +@font-face; NO Google Fonts / CDN.public/—robots.txt,sitemap.xml(or @astrojs/sitemap),/llms.txt, favicon set.cms/oradmin/— Decap/Sveltia config if a CMS was chosen.legal/source for Impressum + Datenschutzerklärung pages.design/— harvested inspiration refs + token notes from the chained skills.netlify.toml— build + headers (CSP, security headers).
Stack defaults & done-bar
Default stack: Astro 5 static output, TypeScript, tokens.css, content collections, self-hosted fonts, @astrojs/sitemap, optional Decap/Sveltia git CMS, Netlify deploy from main. Reach for Next.js only if the project genuinely needs SSR/app-server behaviour (then it likely belongs in saas).
"Finished/working" means (checkable bar):
astro buildis clean; site deploys and loads on the target host.- Lighthouse: Performance, Accessibility, Best-Practices, SEO all ≥ 90 (a11y = 100 target).
- BITV/WCAG-AA verified: keyboard-navigable, visible focus, contrast passes, every image has meaningful alt.
- Zero external network calls to Google Fonts / CDNs (verify in the network panel).
- Impressum + Datenschutzerklärung present and linked; consent handled if cookies are set.
- Responsive from 320px to wide desktop; primary CTA reachable on every relevant page.
/llms.txt+ schema.org JSON-LD present.
Guardrails
- DSGVO first: no third-party CDN, no Google Fonts, no analytics that ships PII without consent — IP-leak is a real legal risk. Self-host everything.
- Accessibility is a gate, not a nice-to-have — BITV/WCAG-AA failures block "done".
- No emojis in the UI — typographic symbols only (user's standing rule).
- Honesty in copy: flag any factual claim (stats, certifications, testimonials) for the user/client to confirm before publish; never invent credentials or quotes.
- Photo/consent: no images of identifiable people without confirmed consent.
- Inspiration ≠ copying: study patterns/tokens from
framer-inspiration/design-harvest; never lift copyrighted assets or markup. - Commits under the user's name only (Skryx-L-A); never add Claude as co-author.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Skryx-L-A
- Source: Skryx-L-A/project-kit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.