Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add gethouston/houston --skill design-reviewgit clone --depth 1 https://github.com/gethouston/houstonWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gethouston/houston/design-review)<a href="https://agentmods.dev/skills/gethouston/houston/design-review"><img src="https://agentmods.dev/badge/skills/gethouston/houston/design-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/gethouston/houston/design-review"><img src="https://agentmods.dev/badge/skills/gethouston/houston/design-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01429 |
| Opus 5 | $0.00000 | $0.00714 |
| Sonnet 5 | $0.00000 | $0.00286 |
| Haiku 4.5 | $0.00000 | $0.00143 |
Grade A, and why
design-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 78 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/design-review
You cannot judge UI from code. Look at it. A picture is worth 1000 tokens.
Never report UI work complete without running this loop. Minimum 2 passes; plan on 3–5. Stop when a pass finds nothing above severity-minor.
Precondition
Read /DESIGN.md (repo root) FIRST — the spec that defines the rules this loop scores against (hard rules, token quick-reference, motion, banned defaults). The --ht-* token values live in packages/design-tokens/tokens/*.json. This is what "token compliance" and "motion rules" below are measured against.
The loop
1. Bring the surface up
App screens (app/src / packages/web) run against an in-memory fake host — no real backend, no AI, no credentials. Two paths:
- Playwright harness (default, hermetic).
pnpm --filter houston-web test:e2eboots both servers itself (vite:1430+ fake host:4399) — write a throwaway spec (or extend one) that navigates the touched screen and callspage.screenshot(...). Fixtures seed a booted shell with one agent selected (packages/web/e2e/README.md). Arm Teams / integration / board states via the/__test__/*controls documented there. There is also a scoped/verifyskill (houston/packages/web:verify) that drives host + Playwright flows. - Manual, two panes. Terminal 1:
pnpm --filter houston-web fake-host(:4399). Terminal 2:pnpm --filter houston-web dev(vite:1430). Then drive a browser — Playwright script, or the Chrome/browser MCP if available — to the touched screen.
Website (website/, Eleventy — no fake host): cd website && npm run dev serves the built site (--serve), or npm run build then serve _site/. Same rubric applies.
2. Screenshot — both themes, two widths
For every touched screen, capture the matrix:
| Desktop (~1280px) | Narrow (~380px) | |
|---|---|---|
| Light | ✓ | ✓ |
| Dark | ✓ | ✓ |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 78 lines · 0 tokens per session scan A a57fb89d186a
design-review is a skill published in the GitHub repository gethouston/houston (113 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,429 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
chakra-ui-builder
Build responsive, accessible UI components and layouts using Chakra UI v3, install or configure Chakra UI in new and existing projects, and design scalable themes using tokens, semantic tokens, recipes, and slot recipes. Use this skill whenever a user asks to build, create, or generate any UI component, page, form…
visual-ralph
Visual Ralph orchestration for frontend UI from generated references, static references, or live URL targets, using $ralph with built-in visual verdict and pixel-diff evidence until the implementation matches and leaves a reproducible design system.
frontend-ui-dark-ts
Build dark-themed React applications using Tailwind CSS with custom theming, glassmorphism effects, and Framer Motion animations. Use when creating dashboards, admin panels, or data-rich interfaces with a refined dark aesthetic.
reveal-hover-effect
Build cursor-following spotlight reveals that expose a second aligned image through a soft radial mask. Use for hover-to-color, before-and-after, x-ray, material, texture, product-detail, and illustrated hero effects where a desaturated or embossed base image should remain visible while another treatment follows an…
frontend-visual-qa
Audits already-rendered web, landing-page, HTML deck/slide, browser tool/game, dashboard/admin, design-system, and desktop UIs using real-browser or native-app journeys, inspected screenshots, DOM geometry, responsive or projection viewports, and a bundled Playwright sweep. Use after UI implementation to find…
prototype-web
A clickable, high-fidelity web product prototype with navigation, a hero section, feature cards, steps, social proof, and optional pricing. It is designed to resemble a finished landing page while remaining a prototype.