Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/ImL1s/GUI-AnythingWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/iml1s/gui-anything/validate)<a href="https://agentmods.dev/commands/iml1s/gui-anything/validate"><img src="https://agentmods.dev/badge/commands/iml1s/gui-anything/validate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/iml1s/gui-anything/validate"><img src="https://agentmods.dev/badge/commands/iml1s/gui-anything/validate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00876 |
| Opus 5.5 | $0.00000 | $0.00350 |
| Sonnet 5.5 | $0.00000 | $0.00175 |
| Haiku 4.5 | $0.00000 | $0.00088 |
Grade A, and why
validate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 110 lines — stays where its author put it; the contents beside it link to each section on GitHub.
gui-anything:validate Command
Validate a GUI harness against HARNESS.md standards and best practices.
CRITICAL: Read HARNESS.md First
Before validating, read ./HARNESS.md. It is the single source of truth
for all validation checks below.
Usage
/gui-anything:validate <software-path-or-repo>
Arguments
<software-path-or-repo>- Required. Either:- A local path to the software source code
- A GitHub repository URL
What This Command Validates
1. Directory Structure
agent-harness/gui_anything/<software>/existssrc/,agent-harness/,utils/,tests/subdirectories presentpackage.jsonin agent-harness/ root
2. Required Files
README.md— Installation and usage guidegui-schema.json— A2UI schema (source of truth)theme.json— Visual theme configurationsrc/App.tsx— Main application componentsrc/main.tsx— React entry pointsrc/components/A2UIRenderer.tsx— Schema renderersrc/components/ActionPanel.tsx— Form generatorsrc/components/PreviewPane.tsx— Output displaysrc/components/StatusBar.tsx— Status indicatorsrc/styles/global.css— Responsive themeagent-harness/mcp-tools.json— MCP tool definitionstests/TEST.md— Test plan and results../<SOFTWARE>.md— Software-specific SOP
3. A2UI Schema Standards
- Has
metadatawith title and description - Has
surfacesarray with at least one surface - Has
actionsobject with at least one action - Every action has
handler,group, and parameter definitions - All component types are valid A2UI types
4. MCP Tool Standards
- Every schema action has a matching MCP tool
- Tool names use
__double-underscore as group separator - Every tool has valid
inputSchema - Special tools present:
take_screenshot,get_gui_state,navigate_to - Tool count = action count + 3 (special tools)
5. Theme Standards
- Has
colorswith: primary, accent, background, surface, text - Has
fontswith: family, sizes - Has
spacingandradiusvalues - All color values are valid CSS (hex, hsl, or rgb)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 110 lines · 0 tokens per session scan A e974420b7236
validate is a command published in the GitHub repository ImL1s/GUI-Anything (5 stars, last pushed 1mo ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 876 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
verify-bug
Post-merge UAT verification workflow. Walks JIRA reproduce steps, performs comparative audits (Before/After), attaches evidence to JIRA, and transitions status on PASS.
test-loop
Plan, generate, and heal an executable E2E test suite from approved acceptance criteria (web and mobile).
qa
Live-app real-user QA pass derived from the spec.
e2e-testing
:::info The Playwright suite launches the real Electron main process and built React UI on Windows and macOS. It exercises the preload bridge, IPC handlers, and file storage. See Testing Commands for the separate Vitest suite. ::.
qa
Pre-PR quality gate — browser-driven QA for web changes with a mandatory evidence packet against a provisioned environment. No QA-passed claim without artifacts. Workspace-aware. For a quick behavioral check without the evidence packet, prefer the bundled /verify or /run.
explain
Build a narrated "what was made" walkthrough from a QA packet — golden-path demo clips (Playwright, overlays off) + animate motion graphics + local kokoro-js voice, assembled by orc-explain; one preview gate before render; delivered via the evidence-publish gates. Use after /orc:qa passes or on any .orc evidence…