Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/randomittin/heimdallnpx agentmods add commands/randomittin/heimdall/designmatchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/randomittin/heimdall/designmatch)<a href="https://agentmods.dev/commands/randomittin/heimdall/designmatch"><img src="https://agentmods.dev/badge/commands/randomittin/heimdall/designmatch/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/randomittin/heimdall/designmatch"><img src="https://agentmods.dev/badge/commands/randomittin/heimdall/designmatch.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.01252 |
| Opus 5.5 | $0.00032 | $0.00501 |
| Sonnet 5.5 | $0.00016 | $0.00250 |
| Haiku 4.5 | $0.00008 | $0.00125 |
Grade A, and why
designmatch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/hmd:designmatch — bootstrap designmatch in an RN app
What this command does
Auto-runs designmatch init <canonical-source> --app-dir <pwd>:
- Validates the current directory looks like a React Native app (
package.jsonwithreact-nativedep). - Copies
skills/designmatch/assets/visual-qa.tsinto the app at a sensible path (src/lib/visual-qa.ts, falling back tosrc/utils/,src/,app/, or root). - Writes default
.designmatch/state.vqa.json(seeds user/recipient/bonus/transfer per the skill spec). - Registers the canonical source in
.designmatch/config.json:- HTTPS URL → stored for lazy Playwright fetch
- Local dir → copied wholesale to
.designmatch/canonical/ - Local HTML file → copied as the canonical entry (with sibling jsx/css/png/svg)
- Updates
.gitignore(idempotent) to exclude regenerated artifacts (.designmatch/canonical/,.designmatch/screens/). - Prints the wiring snippet for
App.tsxand the next-step command.
How to invoke
The user types:
/hmd:designmatch <claude-design-url-or-path>
Examples:
/hmd:designmatch https://api.anthropic.com/v1/design/h/BwHAOZU59KCkBa9UQk015Q?open_file=Wallet+Web.html
/hmd:designmatch ./design-bundle/
/hmd:designmatch ./App.html
Optional flags after the source:
--app-dir <path>— RN project root (default: cwd)--target <rel>— explicit destination forvisual-qa.ts(default: auto-detect)--force— overwrite existing files--no-fetch— skip auto-fetching URL canonicals (default: auto-fetch on)--no-port-all— skip the bulk port step (default: port-all on)--headed— launch Chromium visibly for interactive auth when fetching
What the orchestrator should do
URL in, ready-to-translate out. The default one-shot is:
designmatch init "<source>" --app-dir "$PWD" --port-all
This runs the full pipeline:
- App-side: copies
visual-qa.ts(→src/lib/visual-qa.tsby default), writes.designmatch/state.vqa.json, updates.gitignore. - Fetch (if URL): Playwright downloads the bundle to
.designmatch/canonical/and flips config fromurl→local-dir. - Port-all: discovers
screen-*.jsx|tsx/*Screen.jsx|tsxin the bundle, emits each tosrc/screens/<Name>.tsxpreceded by the TRANSLATION GUIDE. - Wiring snippet: printed for
App.tsx.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 98 lines · 79 tokens per session scan A 2cd365d957e0
designmatch is a command published in the GitHub repository randomittin/heimdall (5 stars, last pushed 4d ago), licensed MIT. It adds 79 tokens to every session and 1,252 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
challenge-swarm
Multi-lens design challenger. Reads a design/spec/plan/proposal, profiles it (who can reach it, whose data, what being wrong costs), then seats 3-6 expert lenses from a 30-lens catalog spanning engineering, data/ML, business, finance, communication, and delivery — each seated only with a cited stake, reflexive picks…
atomic-help
Route a lost user to the right atomic verb, skill, agent, or binary subcommand. Bare invocation reads git state and recommends one next step. Topic keyword or freeform intent → focused pointer. tour → guided walkthrough of the system. Help router, not duplicated docs.
follow-up
Review and act on pending reminders. Bare invocation shows all reminders as an indexed list; cron-fired invocation (/follow-up due ) surfaces the specific reminder and waits for a response; /follow-up review lists stale project follow-up entries for per-item disposition (extend/close/promote/skip). Transport-aware…
review-branch
Review the current branch's diff against base by dispatching atomic-reviewer. No orchestration loop, no spec required — pre-flight before /commit pr or /commit merge.
report-issue
Open a atomic GitHub issue via gh. Bug report or feature request — auto-detect from user's description.
status
Show tlive daemon, channel, and Codex companion status.