Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add fledgeling-co/fledgeling-pluginsnpx agentmods add plugins/fledgeling-co/fledgeling-plugins/design-reviewgit clone --depth 1 https://github.com/fledgeling-co/fledgeling-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/fledgeling-co/fledgeling-plugins/design-review)<a href="https://agentmods.dev/plugins/fledgeling-co/fledgeling-plugins/design-review"><img src="https://agentmods.dev/badge/plugins/fledgeling-co/fledgeling-plugins/design-review.svg" alt="Measured on agentmods" height="20"></a>Grade A, and why
design-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 10 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "design-review",
"description": "Expert design and UX review of rendered web apps, websites, app UI flows, infographics and design artifacts \u2014 the last pass before a human looks at AI-built UI. Runs deterministic accessibility, contrast, target-size, performance and layout-integrity gates first (column alignment, shared rails, section gaps, text overlap, dead space, column and band voids, implicit grid tracks, divider proximity, affordance, token overloading), then structural, state, component-inventory, craft, flow, design-system and intent-conformance passes against real renders at multiple viewports, and returns severity-ranked findings with pasteable fixes, evidence, and an explicit statement of what was never checked. Every gate reports four numbers rather than one \u2014 failed, passed, could-not-run, and the population examined \u2014 because a check whose pass and cannot-run look identical is indistinguishable from a real measurement: engine capability is measured before anything is read, each computed value carries whether it came from the cascade or from a stylesheet declaration, and the unmeasurable population is a reported number instead of a silent zero. A coverage ledger fixes the surface count before the first capture and its exit code is the verdict, geometry findings are clustered by root cause before they are ranked, and a second gate checks every number in the finished report against what the run actually recorded. Use this whenever someone asks to review, audit, critique, QA, sanity-check or \"give feedback on\" a UI, page, screen, flow, prototype, landing page, dashboard, deck or design \u2014 or says their UI \"looks AI-generated\", \"looks off\", \"feels cheap\", \"needs polish\", \"isn't accessible\", or asks whether something is ready to ship or ready for a human to look at. Also use it before shipping any UI that Claude or another AI tool generated, even when nobody used the word \"review\". When distinctiveness is in scoWhat it installs
The manifest is a name and a version. 1 skill travel with it, and installing the plugin installs all of them — 318 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 10 lines scan A 01047b19dec5
design-review is a plugin published in the GitHub repository fledgeling-co/fledgeling-plugins (2 stars, last pushed 3d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other plugins, from other repositories
raven-mcp
Design-intelligence MCP server: audits pages, screens, and diffs for contrast, layout, tap targets, and consistency; carries a design system and a taste profile an agent can consult before writing UI code.
liquid-glass
Apple-style liquid glass: frosted, refracting surfaces for web UI, with the rules that keep them from reading as gray boxes.
motion-design-skills
Motion design fundamentals, engines, and brand elements as installable skills for AI coding agents — timing, typography, color, composition, After Effects, Remotion, logos, and backgrounds.
cutify-that-tab
Add a cute, hand-authored SVG favicon to a web app. Three techniques (emoji, gradient blob, 16×16 pixel art) — ships with 56 pixel-art mascots and 22 emotion-variant gradient blobs.
artifact-organizer
Generate self-contained HTML pages for diagrams, slides, tables, architecture overviews, and visual explanations. LLM emits semantic JSON; renderer produces HTML.
hyperstack
Disciplined MCP server + skill system. 12 plugins and 80 tools covering designer (6 personalities, 13 page templates, 9 presets), shadcn/ui, design tokens, ui/ux, React Flow v12, Motion v12, Lenis, React 19, Echo, Go, and Rust. 22 skills with adversarial enforcement: Iron Laws, 1% Rule, rationalization tables, and…