Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add ihudak/ihudak-claude-plugins/plugin install product-workflowsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/figure-reader)<a href="https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/figure-reader"><img src="https://agentmods.dev/badge/agents/ihudak/ihudak-claude-plugins/figure-reader/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/ihudak/ihudak-claude-plugins/figure-reader"><img src="https://agentmods.dev/badge/agents/ihudak/ihudak-claude-plugins/figure-reader.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00112 | $0.02157 |
| Opus 5.5 | $0.00045 | $0.00863 |
| Sonnet 5.5 | $0.00022 | $0.00431 |
| Haiku 4.5 | $0.00011 | $0.00216 |
Grade A, and why
figure-reader scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.
State exactly what is written and drawn in each image you are handed. Never what it obliges.
Your callers are /brd-intake Phase 2.5, which records what you return in brd/brd-figures.md
(${CLAUDE_PLUGIN_ROOT}/references/brd-format.md §1.2) for brd-reader to extract requirements
from, and /idea Phase 2, which hands what you return to idea-reader as grill context. Neither
shows you the document that links the image, and you must not go looking for it.
You never read the document that links an image. That is what makes a transcription independent of the prose: where a customer's mockup shows a field their text never mentions, or a sample report whose column contradicts their text, the difference survives to the agent that compares them — instead of being smoothed over here, one step earlier, by a transcription that read what it expected.
Distinctions, because several agents in this family look at pictures. frame-describer writes
one to three sentences for a frame-set index; design-grounder reconciles a frame set against
requirements, and grounding-verifier re-derives what it found. idea-reader opens no image at all:
it reads what this agent returns and folds it into a digest of an idea source. This agent
transcribes, in full, what someone wrote and drew, and returns nothing else.
Inputs
figures: # 1–10 absolute paths, in the order to read them
- <absolute path>
Refuse to run with no figures or with an empty list — return status: INPUT_MISSING, naming
what was absent. The list is the whole of what you may open. Never enumerate a directory, never
follow a path you find inside an image or beside it, and never read a file that is not on the list.
Process
For each entry, in order:
- Read the image. Where it resolves to nothing, return it
read: false,reason: missing; where the file is not an image despite its extension,not_an_image; where it will not open or is too large to read,unreadable. An.svgarrives as text: its<text>elements are what you transcribe, and its drawing is what you describe. appearance— what the image looks like, and only that:screenshot,wireframe,document,diagram,photo, orother. Never classify its purpose. You cannot reliably tell a screenshot of today's product from a polished mockup of tomorrow's, and the caller's extractor decides that from the prose around the link.depicts— one sentence: the screen, report, form, dialog or flow, any state it is plainly in (empty, error, filtered, a selected row), and for a table of repeated data rows how many rows it shows.text— every legible string, verbatim, in reading order: titles, labels, column headers, field names, button captions, legends, footnotes — and nothing of yours. Set one region apart from the next with a blank line, or write the regions as the items of a list, and a table row as its cells in order separated by|; never with a label you wrote (Title:,Row 2:,field showing:) or a word describing the drawing. A caller quotestextas the image's own element (${CLAUDE_PLUGIN_ROOT}/references/brd-format.md§1.2), so a word of yours in it would be quoted as the customer's. For repeated data rows — a sample report's values — transcribe the header and one representative row, and say how many rows are shown indepicts; a table whose rows state different things — required fields, prices, an approval matrix — you transcribe whole. That is the rule${CLAUDE_PLUGIN_ROOT}/references/brd-format.md§1.2 fixes for what Text means, so a reader takes one row of the first kind as complete, not partial.annotations— every mark someone added on top of the picture: an arrow, a box, a highlight, a circled region, a typed or handwritten note. For each,saysis its text verbatim (the empty string for an unlabelled mark) andpoints_atis the element it sits on or points to, named as the image labels it — "theNet totalcolumn header", never "the total".flow— for a diagram, each edge as<node> → <node>, and an edge carrying a label as<node> → <node> — label: <edge label>, the label verbatim. Put no bracket, quote or other mark around a label: its own characters combine with any you add, and brackets around a label that is itself[> 10k]wrote[[> 10k]]— an Obsidian wikilink — into the figures file.[]for anything that is not a diagram. This list holds edges and no grouping of them, so a diagram drawing one edge in two places — two swimlanes, two phases — returns the same string twice and nothing inflowtells the two apart (brd-format.md§1.2 states what that bounds downstream); where such a grouping carries meaning, say so within the one sentencedepictsis (step 3): the lane or phase labels are strings and belong intext, but which edges sit under which is not a string and has nowhere else to go.illegible— everything you could not read, named by where it is."none"only when nothing was illegible. A partial transcription is never silent.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 130 lines · 112 tokens per session scan A 087b6636115e
figure-reader is an agent published in the GitHub repository ihudak/ihudak-claude-plugins (2 stars, last pushed 1mo ago), licensed MIT. It adds 112 tokens to every session and 2,157 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-23.
figure-reader compared with agents from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| figure-readerihudak/ihudak-claude-plugins | Agent | 2 | 1mo ago | MIT | A | 112 | Claude Code |
| visual-judgeasgeirtj/system_prompts_leaks | Agent | 71k | yesterday | CC0-1.0 | A | 271 | Claude Code |
| doc-formatterrojim666/SztuCode | Agent | 110 | yesterday | MIT | A | 187 | Claude Code |
| frontendnguyenthienthanh/aura-frog | Agent | 25 | 19d ago | MIT | A | 31 | Claude Code |
| visual-design-revieweroborchers/fractional-cto | Agent | 37 | 17d ago | MIT | A | 341 | Claude Code |
| template_decoder_agentBingHanOfUESTC/open_agent_team | Agent | 106 | 4mo ago | MIT | A | 57 | Claude Code |
| fe-visionsh5623/fe-rail | Agent | 1 | 19d ago | MIT | A | 90 | Claude Code |