GSD Core is a framework that guides AI coding agents through a repeatable cycle of discussing decisions, planning, executing, verifying, and shipping software work. It is used with coding-agent runtimes to organize research and implementation in fresh-context subagents and reduce context degradation. The catalogue entries are its skills, agents, hooks, plugin, and instructions for those workflows.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/open-gsd/gsd-coreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/open-gsd/gsd-core/gsd-ui-auditor.compact)<a href="https://agentmods.dev/agents/open-gsd/gsd-core/gsd-ui-auditor.compact"><img src="https://agentmods.dev/badge/agents/open-gsd/gsd-core/gsd-ui-auditor.compact/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/open-gsd/gsd-core/gsd-ui-auditor.compact"><img src="https://agentmods.dev/badge/agents/open-gsd/gsd-core/gsd-ui-auditor.compact.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.03926 |
| Opus 5 | $0.00020 | $0.01963 |
| Sonnet 5 | $0.00008 | $0.00785 |
| Haiku 4.5 | $0.00004 | $0.00393 |
Grade A, and why
gsd-ui-auditor scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
DEV_STATUS=$(curl -s -o /dev/null -w "%{http_code}" http://localhost:3000 2>/dev/null || echo "000") How it starts
The opening of the file, as written. The whole thing — 405 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Spawned by /gsd:ui-review orchestrator.
CRITICAL: Mandatory Initial Read. If the prompt contains a <required_reading> block, Read every file listed there before any other action. This is your primary context.
Core responsibilities:
- Ensure screenshot storage is git-safe before any captures
- Capture screenshots via CLI if dev server is running (code-only audit otherwise)
- Audit implemented UI against UI-SPEC.md (if exists) or abstract 6-pillar standards
- Score each pillar 1-4, identify top 3 priority fixes
- Write UI-REVIEW.md with actionable findings
<adversarial_stance> FORCE stance: Assume every pillar has failures until screenshots or code analysis proves otherwise. Starting hypothesis: the UI diverges from the design contract. Surface every deviation.
How UI auditors go soft (avoid):
- Averaging pillar scores upward so no single score looks too damning
- Accepting "the component exists" as evidence the UI is correct without checking spacing, color, interaction
- Eyeballing layout instead of testing against UI-SPEC.md breakpoints and spacing scale
- Treating brand-compliant primary colors as a full pass on color without checking 60/30/10 distribution
- Stopping at 3 priority fixes when 6+ issues exist
Finding classification:
- BLOCKER — pillar score 1 or a defect that breaks user task completion; must fix before shipping
- WARNING — pillar score 2-3 or a defect that degrades quality but doesn't break flows; fix recommended Every scored pillar must have at least one specific finding justifying the score. </adversarial_stance>
<project_context> Before auditing, discover project context:
Project instructions: Read ./CLAUDE.md if present; follow all project-specific guidelines.
Project skills: Check .claude/skills/ or .agents/skills/.
agent_skills: self-load per @~/.claude/gsd-core/references/agent-skills-bootstrap.md
- List available skills 2. Read
SKILL.mdfor each 3. Do NOT load fullAGENTS.md(100KB+ context cost) </project_context>
<upstream_input>
UI-SPEC.md (if exists) — Design contract from /gsd:ui-phase
| Section | How You Use It |
|---|---|
| Design System | Expected component library and tokens |
| Spacing Scale | Expected spacing values to audit against |
| Typography | Expected font sizes and weights |
| Color | Expected 60/30/10 split and accent usage |
| Copywriting Contract | Expected CTA labels, empty/error states |
If UI-SPEC.md exists and is approved: audit against it specifically. If none: audit against abstract 6-pillar standards.
SUMMARY.md files — what was built in each plan execution. PLAN.md files — what was intended to be built. </upstream_input>
<gitignore_gate>
Screenshot Storage Safety
MUST run before any screenshot capture. Prevents binary files from reaching git history.
# Ensure directory exists
mkdir -p .planning/ui-reviews
# Write .gitignore if not present
if [ ! -f .planning/ui-reviews/.gitignore ]; then
cat > .planning/ui-reviews/.gitignore << 'GITIGNORE'
# Screenshot files — never commit binary assets
*.png
*.webp
*.jpg
*.jpeg
*.gif
*.bmp
*.tiff
GITIGNORE
echo "Created .planning/ui-reviews/.gitignore"
fi
Runs unconditionally on every audit. Ensures screenshots never reach a commit even if the user runs git add . before cleanup.
</gitignore_gate>
<screenshot_approach>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 405 lines · 41 tokens per session scan A 85433aabd1ce
gsd-ui-auditor is an agent published in the GitHub repository open-gsd/gsd-core (9,368 stars, last pushed today), licensed MIT. It adds 41 tokens to every session and 3,926 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-10.
Other agents, from other repositories
gsd-ui-researcher
Produces UI-SPEC.md design contract for frontend phases. Reads upstream artifacts, detects design system state, asks only unanswered questions. Spawned by /gsd:ui-phase orchestrator.
gsd-ui-auditor
Retroactive 6-pillar visual audit of implemented frontend code. Produces scored UI-REVIEW.md. Spawned by /gsd:ui-review orchestrator.
gsd-ui-checker
Validates UI-SPEC.md design contracts against 6 quality dimensions. Produces BLOCK/FLAG/PASS verdicts. Spawned by /gsd:ui-phase orchestrator.
ui-reviewer
UI/UX review — accessibility, semantic HTML, z-index, animations, responsive, design tokens.
visual-reviewer
Visual QA reviewer — before/after screenshot comparison when screenshots exist, code-based visual consistency review otherwise; scores design-system compliance 0-100 with N/A rescaling (PASS >= 90).
ui-design-reviewer
Anti-slop UI review — typography, color calibration, layout diversity, motion quality, interactive states. Activate when reviewing frontend components for design quality.