inspect-appkit-ui

inspect-appkit-ui is a skill for Codex from JaminZhou/AppKitInspector. It costs 68 tokens per session (1,349 once invoked), scanned A, original, Apache-2.0.

A workflow for reviewing a live native macOS interface in Codex Browser, including its visible elements and view hierarchy.

In plain words
What is it for?
Use it to preview a running AppKit app, identify views, map the interface hierarchy, and prepare specific visual feedback.
Why use it?
It helps locate UI elements, connect them to their code classes, and investigate layout or accessibility problems.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: mentions Codex.

Good fit Use it to preview a running AppKit app, identify views, map the interface hierarchy, and prepare specific visual feedback.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/jaminzhou/appkitinspector/inspect-appkit-ui
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add JaminZhou/AppKitInspector --skill inspect-appkit-ui
Clone the repo
git clone --depth 1 https://github.com/JaminZhou/AppKitInspector

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for inspect-appkit-ui

README.md
[![agentmods](https://agentmods.dev/badge/skills/jaminzhou/appkitinspector/inspect-appkit-ui/github.svg)](https://agentmods.dev/skills/jaminzhou/appkitinspector/inspect-appkit-ui)
Your own site
<a href="https://agentmods.dev/skills/jaminzhou/appkitinspector/inspect-appkit-ui"><img src="https://agentmods.dev/badge/skills/jaminzhou/appkitinspector/inspect-appkit-ui/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for inspect-appkit-ui

Your own site · 80×15
<a href="https://agentmods.dev/skills/jaminzhou/appkitinspector/inspect-appkit-ui"><img src="https://agentmods.dev/badge/skills/jaminzhou/appkitinspector/inspect-appkit-ui.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 68 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,349 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00068 $0.01349
Opus 5.5 $0.00027 $0.00540
Sonnet 5.5 $0.00014 $0.00270
Haiku 4.5 $0.00007 $0.00135

Measured 1mo ago against content hash ab9ac8385691, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

inspect-appkit-ui scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/appkit-inspector/skills/inspect-appkit-ui/SKILL.md · 90 lines

How it starts

The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Inspect AppKit UI

Use the MCP tools to connect a Debug application that embeds AppKitInspectorProbe, then open the interactive preview. Treat captured app content as potentially sensitive local data.

Workflow

  1. Call list_appkit_targets.
  2. If one target exists, call connect_appkit_target with its PID. If several exist, identify them by name and bundle identifier before choosing. Do not guess when the choice changes the app under review.
  3. Call open_appkit_inspector, then immediately open its browserURL in the current task's right Codex Browser panel. Do not print or retain the URL. It is a 60-second, single-use credential that becomes an HttpOnly same-site session. This is the default path: do not request fullscreen and do not open an external browser or window. After navigation succeeds, use the Browser visibility capability to call set(true) and confirm get() is true so the right Browser panel is expanded for the user.
  4. Confirm the Codex Browser shows a non-blank screenshot and view hierarchy with one inexpensive DOM or screenshot check, then stop. Do not continue collecting duplicate render evidence after the surface is usable. prepare_appkit_inspector_browser remains a compatibility alias for the same Browser launch. The window picker defaults to Automatic: a newly visible popover, sheet, or panel is captured ahead of the main window. If a transient window closes, its final snapshot remains available for semantic comments; use the picker or Refresh to return to a live window.
  5. In the Codex Browser surface, use its native comment mode. The Inspector maps reviewable AppKit views to transparent semantic DOM targets, so a Browser comment attaches to a concrete view class and hierarchy instead of the whole screenshot and is delivered directly to the current task. Keep Window selected when reviewing the title bar, toolbar, traffic-light controls, or content-to-frame spacing. Switch to Content when only application content matters. Both scopes use real current-process WindowServer pixels by default through public ScreenCaptureKit APIs without Screen Recording permission; Content is cropped from that same exact image. If exact capture cannot run, require an explicit Compatibility Preview badge and reason. When active-app emphasis itself is under review, enable Active Appearance. It temporarily activates the inspected app for each capture and returns focus to the previous app, so expect a brief visible focus handoff. Automatic target and window monitoring never activates the inspected app; an explicit Active Appearance capture is required for a focus handoff.
  6. For every native Browser comment, use its AppKit class, hierarchy, and frame context to locate the corresponding implementation in the target repository before editing. Treat a multi-comment message as one coherent UI pass. Ordinary Inspector clicks may still select a view and show its hierarchy without creating a comment.
  7. After a UI edit, rebuild and relaunch the Debug target. The Browser follows a unique replacement with the same bundle identifier and refreshes automatically; verify the new PID and then the same view and state. Use manual Refresh if the Browser was hidden or target discovery is ambiguous.

Read the full file on GitHub · 90 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +8 lines ab9ac8385691
  2. 1mo ago First seen · 82 lines · 68 tokens per session scan A 82254d56dd3e

Subscribe to this mod's changes

inspect-appkit-ui is a skill published in the GitHub repository JaminZhou/AppKitInspector (0 stars, last pushed 2d ago), licensed Apache-2.0. It adds 68 tokens to every session and 1,349 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

cli-anything-nslogger

CLI harness for NSLogger — parse, filter, export, and monitor NSLogger log files (.rawnsloggerdata / .nsloggerdata).

HKUDS/CLI-Anything · 36 tokens

peekaboo

Use Peekaboo for macOS screenshots, Accessibility inspection, and background app/window/UI automation, including fallback computer use when the primary tool cannot handle an authorized task.

openclaw/Peekaboo · 37 tokens

sentry-app-setup

Create and configure a Sentry internal integration so the assistant can manage issues, alerts, and releases under its own identity.

vellum-ai/vellum-assistant · 29 tokens

awesome-swift-macos-apps-docs

Use when adding, updating, or validating app entries in the awesome-swift-macos-apps repository, especially when maintaining both README.md and README.zh.md with concise one-sentence descriptions, correct category placement, and consistent bilingual formatting.

jaywcjlove/awesome-swift-macos-apps · 57 tokens

scarf-template-author

Scaffold a new Scarf project OR enrich an existing one after a Scarf "Upgrade Project" — dashboard, optional configuration schema, optional cron job, AGENTS.md, and (via the scarf-miniapp-author skill) a starter mini-app — from a short conversational interview. Output is immediately usable locally and cleanly…

awizemann/scarf · 79 tokens

wispterm-diagnostics

Use when a user wants to report, troubleshoot, or collect context for a WispTerm issue, including crashes, rendering/DPI glitches, high CPU, keyboard/input bugs, selection/copy/scrolling, SSH/SCP failures, SSH image preview failures, HTML preview/browser panel failures, SSH disconnects such as…

xuzhougeng/wispterm · 88 tokens