Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add EvilFreelancer/screenshotting-gui --skill screenshotting-guigit clone --depth 1 https://github.com/EvilFreelancer/screenshotting-guiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/evilfreelancer/screenshotting-gui/screenshotting-gui)<a href="https://agentmods.dev/skills/evilfreelancer/screenshotting-gui/screenshotting-gui"><img src="https://agentmods.dev/badge/skills/evilfreelancer/screenshotting-gui/screenshotting-gui/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/evilfreelancer/screenshotting-gui/screenshotting-gui"><img src="https://agentmods.dev/badge/skills/evilfreelancer/screenshotting-gui/screenshotting-gui.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00170 | $0.02203 |
| Opus 5 | $0.00085 | $0.01102 |
| Sonnet 5 | $0.00034 | $0.00441 |
| Haiku 4.5 | $0.00017 | $0.00220 |
Grade A, and why
screenshotting-gui scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 162 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Screenshotting a GUI app
Produce documentation-grade screenshots of a running GUI application without a window manager and without touching the operator's screen. The app runs on a throwaway Xvfb display; you drive it to the exact state you want with synthetic X input, capture the frame, and annotate it.
Everything the model already knows (what X11, ImageMagick or a clipboard are) is omitted on purpose - this file is only the parts that are easy to get wrong.
The one rule that keeps it safe
Run on display :99 (Xvfb), never :0. :0 is the operator's live desktop -
clicking, typing and screenshotting it is a privacy and correctness disaster.
The subtle trap: xctl.py / xpaste.py default their own target to :99, but any
GUI app you launch reads $DISPLAY. If $DISPLAY is still :0, the app opens
on the real screen while your captures read :99 - winlist comes back empty and
you capture a black frame. Always export DISPLAY=:99 for the app launch, not
just XCTL_DISPLAY.
Toolchain
Deterministic pieces live in scripts/ (run any with --help):
| Script | Role |
|---|---|
scripts/xctl.py |
Drive the app: move click key type scroll drag place shot winlist via python-Xlib XTEST. |
scripts/xpaste.py |
Serve UTF-8 on the CLIPBOARD so key ctrl+v pastes unicode / non-Latin text. |
scripts/annotate.py |
ImageMagick post-processing: box (rounded highlight), crop, vstack, arrow. |
Requirements: Xvfb, python3 + python-Xlib, ImageMagick (import, convert).
Capture default is ImageMagick import (no extra dependency, no max-size ceiling).
Fallback if ImageMagick is unavailable: python-Xlib root.get_image + Pillow
(~2x faster, but needs Pillow and must tile a root above ~4.2 MP; pixel order is
BGRX, not RGB).
Workflow
DISP=:99
export XCTL_DISPLAY=$DISP
S=scripts # path to this skill's scripts
# 1. Isolated display
Xvfb $DISP -screen 0 1920x1080x24 -ac >/tmp/xvfb.log 2>&1 &
sleep 1; DISPLAY=$DISP xdpyinfo >/dev/null || { echo "Xvfb down"; exit 1; }
# 2. Launch the app ON :99 (export DISPLAY, not only XCTL_DISPLAY)
DISPLAY=$DISP <app> & # e.g. an IDE, a browser, a native app
sleep 2 # heavy Electron/JVM apps need 3-8 s; poll with winlist
python3 $S/xctl.py winlist # confirm the window is on :99, note its geometry
# 3. Drive it to the exact state you want (see command table below)
python3 $S/xctl.py click 1490 1003 # open a menu, toggle a panel, etc.
sleep 0.5
# 4. Capture (full, or crop to the region)
python3 $S/xctl.py shot /tmp/raw.png --crop 1270 560 650 520
# 5. Annotate and save
python3 $S/annotate.py box /tmp/raw.png out.png 1300 600 1720 680
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 162 lines · 170 tokens per session scan A d8019e7914cf
screenshotting-gui is a skill published in the GitHub repository EvilFreelancer/screenshotting-gui (5 stars, last pushed 1mo ago), licensed MIT. It adds 170 tokens to every session and 2,203 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
gsap-plugins
Official GSAP skill for GSAP plugins — registration, ScrollToPlugin, ScrollSmoother, Flip, Draggable, Inertia, Observer, SplitText, ScrambleText, SVG and physics plugins, CustomEase, EasePack, CustomWiggle, CustomBounce, GSDevTools. Use when the user asks about a GSAP plugin, scroll-to, flip animations, draggable, SVG…
hyperframes
READ THIS FIRST for any request to make, create, edit, animate, or render a video, animation, or motion graphic — a promo, explainer, captioned clip, title card, overlay, or any composition. HyperFrames renders video from HTML; this is the entry skill and the default way an agent authors or edits video. It routes the…
seedance-2-0
Generate cinematic clips with ByteDance Seedance 2.0 — the preferred premium video model in OpenMontage when a paid gateway is configured. Use when: (1) producing trailers, teasers, hype edits, or premium cinematic clips, (2) needing native synchronized audio (speech, SFX, ambience) in a single pass, (3) needing…
ffmpeg
Video and audio processing with FFmpeg. Use for format conversion, resizing, compression, audio extraction, and preparing assets for Remotion. Triggers include converting GIF to MP4, resizing video, extracting audio, compressing files, or any media transformation task.
motion-graphics
Use when the user wants a short, design-led motion graphic where motion is the message: kinetic typography, stat or number count-up, chart/data-viz hit, logo sting, brand lockup, lower-third, callout, social overlay, animated headline/tweet/news item, motion poster, or quick captured-page highlight. Usually under 10s…
music-to-video
Use when the user has a music track (an audio file, or a video to pull audio from) and wants a beat-synced HyperFrames video, calm to hard-hitting. The music drives everything: one analyzer reads it once, the orchestrator lays out the frames and fills a per-frame plan, and one sub-agent builds each frame. Typography…