helmor-debug-operate

helmor-debug-operate is a skill for Claude Code, Codex from dohooo/helmor. It costs 117 tokens per session (6,549 once invoked), scanned A, original, Apache-2.0.

Instructions for operating and debugging a running Helmor desktop development build through its Tauri connection. Tauri is the framework that links the desktop interface to the application code.

In plain words
What is it for?
Use it for visual interface checks, screenshots, accessibility inspection, user-interface automation, communication tracing, and runtime debugging.
Why use it?
It provides a defined way to inspect the interface, reproduce problems, trace messages between components, and check the running app.

Skill for Claude CodeCodex

About the project

Helmor is a local workbench for running and coordinating multiple coding agents, with each task isolated in its own Git workspace. Developers use it to review changes, test code, resolve conflicts, and merge or create pull requests. Its catalogue entries extend Helmor with skills, instructions, settings, and hooks.

dohooo/helmor · 1,298 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/dohooo/helmor/helmor-debug-operate
Any agent
npx skills add dohooo/helmor --skill helmor-debug-operate
Clone the repo
git clone --depth 1 https://github.com/dohooo/helmor

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for helmor-debug-operate

README.md
[![agentmods](https://agentmods.dev/badge/skills/dohooo/helmor/helmor-debug-operate.svg)](https://agentmods.dev/skills/dohooo/helmor/helmor-debug-operate)
Your own site
<a href="https://agentmods.dev/skills/dohooo/helmor/helmor-debug-operate"><img src="https://agentmods.dev/badge/skills/dohooo/helmor/helmor-debug-operate.svg" alt="Measured on agentmods" height="20"></a>
Per session 117 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,549 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00117 $0.06549
Opus 5 $0.00059 $0.03275
Sonnet 5 $0.00023 $0.01310
Haiku 4.5 $0.00012 $0.00655

Measured 5d ago against content hash 18d8368a17ea, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

helmor-debug-operate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/helmor-debug-operate/SKILL.md · 485 lines

How it starts

The opening of the file, as written. The whole thing — 485 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Helmor Debug Operate

Use this skill to operate and debug a running Helmor dev build through Tauri MCP with the least possible exploration. It is the visual/runtime counterpart to helmor-cli: prefer Tauri MCP for webview UI, screenshots, CSS, accessibility, and IPC tracing; prefer helmor-cli for terminal-first data inspection or workspace orchestration.

Examples below use bare tool names such as driver_session; call the same tool through whatever namespace the runtime exposes.

References

Read these only when needed:

  • references/verified-recipes.md for action-specific recipes that have passed three consecutive Tauri MCP verification attempts.
  • references/ui-map.md for selectors, Settings panels, Inspector/Editor preconditions, and destructive-action boundaries.

Ground Rules

  • Treat every action as real user input against the active app. Do not send prompts, close sessions, archive/delete workspaces, stop streams, or mutate settings unless the user asked for that outcome or it is necessary for the verification.
  • Use the Tauri MCP bridge only for Helmor desktop debugging. Do not switch to Chrome DevTools, Browser, Playwright, or /agent-browser unless the user explicitly asks for another surface.
  • Require a debug Tauri build. The bridge is absent in release builds. If connection fails, ask the user to run bun run dev or call get_setup_instructions only when bridge setup itself is suspect.
  • Default to port: 9223 and windowId: "main".
  • Re-run webview_dom_snapshot after every meaningful UI change. ref=eN handles are per-snapshot and expire after DOM changes.
  • Prefer accessibility snapshots for finding controls, but fall back to structure snapshots and read-only DOM rect inspection when accessibility support is unavailable.
  • Prefer UI operations for end-to-end validation. Do not use the Tauri MCP tool ipc_execute_command for Helmor app commands such as list_workspace_groups, reveal_workspace_in_main_window, or debug_list_terminal_buffers: the current bridge returns Unsupported Tauri command because dynamic app-command execution is not implemented there. Use the verified app-command helper in Call App Commands instead.
  • Do not use webview_execute_js to dispatch synthetic user events. Use it only for read-only, JSON-serializable inspection when MCP tools cannot answer the question.
  • Exception: Helmor's composer is a Lexical contenteditable, not a native input. If webview_keyboard type fails with the current bridge, document.execCommand("insertText", false, text) after real MCP focus/click is the last-resort smoke-test input path. Label it as a fallback and verify visible state afterward.
  • If you start ipc_monitor, always stop it before finishing, even if the task fails.
  • Save screenshots or scratch logs under .agent-contexts/<task-slug>/ when working inside this repository.
  • If a Settings dialog appears stuck visible with data-state="closed", press Cmd+, to reopen it, then Escape to close. Verify document.querySelectorAll('[role="dialog"]').length === 0 and main[aria-hidden] is absent.
  • If webview_execute_js or console log reads start timing out while screenshots and driver_session status still work, restart only the MCP driver session (driver_session stop appIdentifier=9223, then driver_session start port=9223). Do not restart the Helmor dev build unless the bridge cannot reconnect.
  • If you launch a disposable app with HELMOR_DATA_DIR for validation, create both the data dir and its run/ subdir first. Missing run/ can make the UI sync socket fail to bind, leaving backend mutations invisible until you force a reveal or restart.
  • Treat this skill as an operation hint, not an authoritative source of truth. The local UI can drift ahead of these recipes. If a recipe fails three times, stop repeating it mechanically: take a fresh screenshot/snapshot, reason from the visible UI, and inspect the relevant code if needed.
  • Keep this skill self-improving by proposal, not silent mutation. When you discover a better path, missing pitfall, stale selector, or unverified workaround, record a candidate update under .agent-contexts/<task-slug>/skill-update-candidates.md with the scenario, failing attempts, evidence, proposed recipe, and verification status. Ask the user before editing this skill unless the current user request explicitly asks you to update it.

Read the full file on GitHub · 485 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 485 lines · 117 tokens per session scan A 18d8368a17ea

Subscribe to this mod's changes

helmor-debug-operate is a skill published in the GitHub repository dohooo/helmor (1,298 stars, last pushed 13d ago), licensed Apache-2.0. It adds 117 tokens to every session and 6,549 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

open-dynamic-workflows

Write and run dynamic workflows: short JavaScript scripts in Claude Code's workflow dialect, run with the odw CLI outside the host agent's context, fanning subtasks out to coding-agent CLIs (Codex, Claude Code, Gemini, Qwen, Kimi, or your own) in a background process and handing back only the final result. Use this…

xz1220/open-dynamic-workflows · 141 tokens

open-dynamic-workflows

编写并运行 dynamic workflow:用 Claude Code 的 workflow 方言写一段简短的 JavaScript 脚本,再用 odw CLI 在宿主 agent 的上下文之外,把子任务扇出给 coding-agent CLI (Codex、Claude Code、Gemini、Qwen、Kimi 或自定义),后台跑完后只取回最终结果。 当一个任务大过单次调用——需要并行扇出多份草稿、多阶段评审流水线、对抗式核验发现, 或循环挖掘直到无新发现——或用户提到 odw、dynamic workflow、多 agent 编排、扇出 subagent 时,使用本 skill。.

xz1220/open-dynamic-workflows · 154 tokens

ultra-mode

Execute explicitly authorized Ultracode / Ultra Mode requests: optimize for exhaustive, correct answers within the user's stated scope by using any available independent-work mechanism (ODW workflows, subagents, dispatched workers, or tool-worker fan-out), with serial multi-pass fallback only when no such mechanism…

xz1220/open-dynamic-workflows · 127 tokens

execution

M-1.4 execution skill — 跑 single task 产 patch + 提交 envelope。.

Towow-ai/Flowness · 22 tokens

review

M-1.5 review skill — 在 patch 跟 contract 之间找 finding,produce Finding 一等对象。.

Towow-ai/Flowness · 26 tokens

fix-self-check

M-1.6 envelope self-check——独立性保证不自欺欺人 (5 blockingcheck)。由 CLI ./tw fix complete --self-check-mode fork(默认即 fork)自动派起,不经 Skill 工具调用;fix 主会话产 FixCompleted 前直读本文,是为理解双层验证关系。.

Towow-ai/Flowness · 74 tokens