Helmor is a local workbench for running and coordinating multiple coding agents, with each task isolated in its own Git workspace. Developers use it to review changes, test code, resolve conflicts, and merge or create pull requests. Its catalogue entries extend Helmor with skills, instructions, settings, and hooks.
Borrowing it
Nothing to install: this file belongs to dohooo/helmor. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/dohooo/helmor/main/.agents/skills/helmor-debug-operate/SKILL.mdgit clone --depth 1 https://github.com/dohooo/helmorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dohooo/helmor/helmor-debug-operate)<a href="https://agentmods.dev/skills/dohooo/helmor/helmor-debug-operate"><img src="https://agentmods.dev/badge/skills/dohooo/helmor/helmor-debug-operate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dohooo/helmor/helmor-debug-operate"><img src="https://agentmods.dev/badge/skills/dohooo/helmor/helmor-debug-operate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00117 | $0.06549 |
| Opus 5.5 | $0.00047 | $0.02620 |
| Sonnet 5.5 | $0.00023 | $0.01310 |
| Haiku 4.5 | $0.00012 | $0.00655 |
Grade A, and why
helmor-debug-operate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 485 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Helmor Debug Operate
Use this skill to operate and debug a running Helmor dev build through Tauri MCP with the least possible exploration. It is the visual/runtime counterpart to helmor-cli: prefer Tauri MCP for webview UI, screenshots, CSS, accessibility, and IPC tracing; prefer helmor-cli for terminal-first data inspection or workspace orchestration.
Examples below use bare tool names such as driver_session; call the same tool through whatever namespace the runtime exposes.
References
Read these only when needed:
references/verified-recipes.mdfor action-specific recipes that have passed three consecutive Tauri MCP verification attempts.references/ui-map.mdfor selectors, Settings panels, Inspector/Editor preconditions, and destructive-action boundaries.
Ground Rules
- Treat every action as real user input against the active app. Do not send prompts, close sessions, archive/delete workspaces, stop streams, or mutate settings unless the user asked for that outcome or it is necessary for the verification.
- Use the Tauri MCP bridge only for Helmor desktop debugging. Do not switch to Chrome DevTools, Browser, Playwright, or
/agent-browserunless the user explicitly asks for another surface. - Require a debug Tauri build. The bridge is absent in release builds. If connection fails, ask the user to run
bun run devor callget_setup_instructionsonly when bridge setup itself is suspect. - Default to
port: 9223andwindowId: "main". - Re-run
webview_dom_snapshotafter every meaningful UI change.ref=eNhandles are per-snapshot and expire after DOM changes. - Prefer accessibility snapshots for finding controls, but fall back to structure snapshots and read-only DOM rect inspection when accessibility support is unavailable.
- Prefer UI operations for end-to-end validation. Do not use the Tauri MCP tool
ipc_execute_commandfor Helmor app commands such aslist_workspace_groups,reveal_workspace_in_main_window, ordebug_list_terminal_buffers: the current bridge returnsUnsupported Tauri commandbecause dynamic app-command execution is not implemented there. Use the verified app-command helper in Call App Commands instead. - Do not use
webview_execute_jsto dispatch synthetic user events. Use it only for read-only, JSON-serializable inspection when MCP tools cannot answer the question. - Exception: Helmor's composer is a Lexical
contenteditable, not a native input. Ifwebview_keyboard typefails with the current bridge,document.execCommand("insertText", false, text)after real MCP focus/click is the last-resort smoke-test input path. Label it as a fallback and verify visible state afterward. - If you start
ipc_monitor, always stop it before finishing, even if the task fails. - Save screenshots or scratch logs under
.agent-contexts/<task-slug>/when working inside this repository. - If a Settings dialog appears stuck visible with
data-state="closed", pressCmd+,to reopen it, thenEscapeto close. Verifydocument.querySelectorAll('[role="dialog"]').length === 0andmain[aria-hidden]is absent. - If
webview_execute_jsor console log reads start timing out while screenshots anddriver_session statusstill work, restart only the MCP driver session (driver_session stop appIdentifier=9223, thendriver_session start port=9223). Do not restart the Helmor dev build unless the bridge cannot reconnect. - If you launch a disposable app with
HELMOR_DATA_DIRfor validation, create both the data dir and itsrun/subdir first. Missingrun/can make the UI sync socket fail to bind, leaving backend mutations invisible until you force a reveal or restart. - Treat this skill as an operation hint, not an authoritative source of truth. The local UI can drift ahead of these recipes. If a recipe fails three times, stop repeating it mechanically: take a fresh screenshot/snapshot, reason from the visible UI, and inspect the relevant code if needed.
- Keep this skill self-improving by proposal, not silent mutation. When you discover a better path, missing pitfall, stale selector, or unverified workaround, record a candidate update under
.agent-contexts/<task-slug>/skill-update-candidates.mdwith the scenario, failing attempts, evidence, proposed recipe, and verification status. Ask the user before editing this skill unless the current user request explicitly asks you to update it.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 485 lines · 117 tokens per session scan A 18d8368a17ea
helmor-debug-operate is a skill published in the GitHub repository dohooo/helmor (1,309 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 117 tokens to every session and 6,549 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
add-plugin
Use when installing, disabling, enabling, or troubleshooting a third-party octomux plugin — the manifest row shape, octomux plugins list/disable/enable, reading octomux doctor output, and recovering a broken boot with --safe-mode.
create-task
Use when creating an octomux task to dispatch autonomous Claude Code agents for building features, fixing bugs, or any code changes.
video-quality
Validate a candidate video technically, visually, and editorially before presenting it as complete. Use after rendering a video or when diagnosing playback, aspect ratio, duration, audio, captions, black frames, freezes, identity drift, or other quality problems.
hyperframes-quality
Review and gate an editable HyperFrames composition or its rendered video before delivery. Use after building, revising, diagnosing, or rendering a HyperFrames project when layout, contrast, deterministic timing, transitions, animation choreography, rendered-frame fidelity, or high-quality acceptance needs…
browser-test-self-healing
Build an AgentWorks workflow that diagnoses a browser-test failure, proposes a test-only repair, verifies it in isolation, obtains the configured review, and updates canonical tests and application knowledge. Use for stale or flaky browser automation, not product defects.
flaky-test-detection-stabilization
Build AgentWorks browser-test flake detection and reviewed stabilization using repeated isolated attempts and evidence comparison. Use when identical test inputs produce inconsistent outcomes.