by dembrandt
Extract any website’s design system into tokens in seconds: logo, colors, typography, borders & more. One command.
# Add to your Claude Code skills
git clone https://github.com/dembrandt/dembrandtGuides for using mcp servers skills like dembrandt.
Last scanned: 9/27/2026
{
"issues": [
{
"type": "npm-audit",
"message": "adm-zip: adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite",
"severity": "high"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to host confusion via backslash authority introducer",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono: ReDoS in CORS middleware via Access-Control-Request-Headers",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass",
"severity": "high"
},
{
"type": "npm-audit",
"message": "qs: qs array-limit bypass via bracket-key comma parsing",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-09-27T09:50:11.515Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how dembrandt compares with popular alternatives.
dembrandt is an open-source mcp servers skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by dembrandt. Extract any website’s design system into tokens in seconds: logo, colors, typography, borders & more. One command. It has 3,574 GitHub stars.
dembrandt returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/dembrandt/dembrandt" and add it to your Claude Code skills directory (see the Installation section above).
dembrandt is primarily written in TypeScript. It is open-source under dembrandt on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other MCP Servers skills you can browse and compare side by side. Open the MCP Servers category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh dembrandt against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Extract any website's design system in one command. Enforce it in CI.
Logo, colors, typography, spacing, borders, shadows, motion, components. W3C design tokens in seconds.

npm install -g dembrandt
dembrandt install-browser # one-time: fetches the matching Chromium
dembrandt dembrandt.com
The browser step is required. dembrandt drives Chromium through playwright-core,
which ships no browser binaries, so a fresh install has nothing to launch until you
run it. Skipping it fails with browser engine not available.
Or use npx without installing: npx dembrandt dembrandt.com. The browser step applies
here too: run npx dembrandt install-browser first. Browsers land in a shared
Playwright cache, so either route only needs it once.
Requires Node.js 18+
Playwright renders the page, dembrandt reads computed styles from the DOM, analyzes color usage and confidence, groups similar typography, detects spacing patterns, and returns design tokens.
dembrandt dembrandt.com --shadcn # shadcn/ui theme, observed slots only
dembrandt dembrandt.com --dtcg # W3C design tokens, for Style Dictionary or Tokens Studio
dembrandt dembrandt.com --wcag # WCAG 2.1 contrast on real DOM pairs
Default is formatted terminal output only. Every flag below; the detailed reference is docs/usage.md.
Export
| Flag | What you get |
|---|---|
--shadcn [path] |
shadcn/ui theme, observed slots only |
--tailwind [path] |
Tailwind v4 @theme CSS |
--dtcg |
W3C design tokens (DTCG) |
--design-md |
DESIGN.md for AI agents |
--html [path] |
Self-contained HTML report |
--brand-guide |
Brand guide PDF |
--screenshot <path> |
Viewport screenshot |
--save-output |
JSON to output/<domain>/ |
--json-only |
Raw JSON to stdout |
--raw-colors |
Pre-filter colours too |
--color-format <f> |
Colour notation: hex, rgb, oklch, lch, source |
Analysis
| Flag | What you get |
|---|---|
--wcag |
Contrast grades on real DOM pairs |
--compare <baseline> |
Drift gate; exits 1 when tokens moved |
--approve |
Accept the current run as the new baseline |
--ai |
ML brand-primary prediction (experimental) |
Coverage
| Flag | What you get |
|---|---|
--crawl [n] |
Merge N pages, cross-page confidence |
--sitemap |
Discover pages from sitemap.xml |
--dark-mode |
The dark theme's tokens |
--mobile |
Mobile viewport |
--slow |
3x timeouts for heavy sites |
--browser <type> |
chromium or firefox; CDP via env |
--no-sandbox |
For Docker and CI |
Access
| Flag | What you get |
|---|---|
--cookie <string> |
Reach pages behind a session |
--header <string> |
Any extra request header |
--user-agent <string> |
Custom user agent |
--locale <string> |
Locale for the fingerprint |
--timezone <string> |
Timezone for the fingerprint |
--accept-language <s> |
Accept-Language header |
--screen-size <WxH> |
Reported screen resolution |
--stealth |
Anti-detection; authorized use only |
--key <string> |
Sync runs to your account |
Extract a preview deployment, compare against a committed baseline, fail the job when tokens moved:
- uses: dembrandt/dembrandt@v0.36.0
with:
url: https://preview.example.com
baseline: .dembrandt/baseline.json
The action annotates the PR with the drifted tokens. On any other runner the gate is just an exit code plus JSON: dembrandt URL --compare baseline.json --json-only exits 1 on drift and prints per-token changes[]. See docs/ci.md for the Action inputs, the platform-neutral gate, and the exit code table.
Copy a command, paste a prompt, get a result. Competitor benchmarking, WCAG audits, Figma token push, agentic design system builds. Filterable by role at dembrandt.com/recipes, with the basics in docs/recipes.md.
Use Dembrandt as a tool in Claude Code, Cursor, Windsurf, or any MCP-compatible client. Ask your agent to "extract the color palette from dembrandt.com" and it calls Dembrandt automatically.
claude mcp add --transport stdio dembrandt -- npx -y --package dembrandt dembrandt-mcp
Or add to your project's .mcp.json:
{
"mcpServers": {
"dembrandt": {
"command": "npx",
"args": ["-y", "--package", "dembrandt", "dembrandt-mcp"]
}
}
}
Available tools include get_design_tokens, get_color_palette, get_typography, get_component_styles, get_surfaces, get_spacing, and get_brand_identity, plus pure analysis tools (compute_drift, get_findings, export_dtcg, generate_design_md, render_report) and job-control tools.
Extraction tools accept slow, mobile, darkMode, wcag, cookie and header (for authenticated pages), userAgent, and noSandbox (Docker and most CI containers). Set pages above 1 to crawl and merge several pages, which produces a markedly stronger token set than one page; paths names them explicitly and sitemap discovers them from sitemap.xml.
Extraction returns a job_id. Poll it with get_job_status, then hand that same id to the pure tools instead of passing the extraction back as an argument:
get_design_tokens(url: "example.com", pages: 5) -> job_id
get_job_status(job_id) -> tokens
get_findings(job_id) -> contrast and consistency issues
export_dtcg(job_id) -> W3C design tokens
Pair with dembrandt-skills to give your agent UX intelligence on top of extracted tokens: hierarchy, accessibility, interaction states, and a full 6-stage design pipeline orchestrator.
npx skills add dembrandt/dembrandt-skills
Load extractions, track token drift, and compare snapshots. dembrandt.com/app
--key to the CLI. Every run uploads a snapshot to your account and scores it against the previous one for that domain. Wire into GitHub Actions or any CI runner and every deploy records itself.--dark-mode flag (not automatically detected)--mobile for 390x844 mobile viewport)Dembrandt reads publicly available CSS and computed styles from website DOMs for documentation, learning, and analysis of design systems you own or have permission to analyze.
Only run Dembrandt against sites whose Terms of Service permit automated access, or against your own properties. Do not use extracted material to reproduce third-party brand identities, logos, or trademarks. Respect robots.txt, rate limits, and copyright.
Dembrandt does not host, redistribute, or claim rights to any third-party brand assets.
The CLI is MIT-licensed and free. Sponsorship funds the enforcement layer: a committed project-level token baseline, --compare and the ingest API for CI/CD drift gates, and the App platform (snapshot history, team drift dashboard, alerts to Slack, Linear, and GitHub).
Bugs, weird sites, pull requests.