visual-aspect-analyzer

A browser-based review tool for checking how a changed web page looks on screen. It compares automatically detected page elements across the browser session.

In plain words
What is it for?
Running a final visual check after a user-interface change and identifying what changed in the page’s appearance.
Why use it?
It catches visual changes and layout problems that ordinary tests may miss, including elements that appear or move later.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/tale-project/tale/visual-aspect-analyzer
Any agent
npx skills add tale-project/tale --skill visual-aspect-analyzer
Clone the repo
git clone --depth 1 https://github.com/tale-project/tale

Made for: Claude Code, Codex.

Per session 190 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,957 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00190 $0.03957
Opus 5 $0.00095 $0.01978
Sonnet 5 $0.00038 $0.00791
Haiku 4.5 $0.00019 $0.00396

Measured 2d ago against content hash 6f502957dc77, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

visual-aspect-analyzer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 53 executable files (src/accname.test.ts, src/accname.ts, src/analyze-cli.test.ts, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

configs/platform/custom/skills/visual-aspect-analyzer/SKILL.md · 221 lines

How it starts

The opening of the file, as written. The whole thing — 221 lines — stays where its author put it; the contents beside it link to each section on GitHub.

visual-aspect-analyzer

When you have finished a UI change, run this as the final review step — once, at the end, not after every individual edit. It is the visual-regression gate: the change is not done until it reports score: 100 (Test a UI change).

Drive a real browser over a session and report, per auto-detected element, what actually changed on screen. You don't pick the elements — the instrument finds the page's relevant ones itself (Auto-detection). Impact is temporal — true if it held in any frame — so an element that only starts painting or moving mid-session is still caught.

Boundaries. It auto-scrolls but never clicks, types, or logs in, so defects behind an interaction are caught only via the embed interact hook. It sees the main document only — closed shadow roots and cross-origin iframes aren't pierced.

Run it

bun src/analyze-cli.ts <url>     # run from the skill directory

In the Tale sandbox this is pre-installed — the bundle, its pngjs dep, the playwright package (shared with the agent's browser tooling), and Chromium are all baked into the image, so there is no install step. (Working on the skill locally instead? Install the browser tooling once first: bun add -d playwright && bunx playwright install chromium.)

Paths below are relative to the skill directory. Needs Bun (bun.sh) — no npm/node fallback. The run is headless and self-driving: it loads the page hidden, auto-scrolls the whole session, then exits on its own (seconds for a light page) — nothing waits on you. Any reachable URL works, including a local dev server (http://localhost:3000) — start your server first; the tool drives a browser, it doesn't launch your app.

  • No build step — Bun runs the TypeScript directly and bundles the in-page instrument in memory.
  • Always on — pixel capture (dithering + the paint check) and auto-scroll (lazy content + CLS), so a bare run never silently misses a defect.
  • stdout is pure JSON (the compact report); the health summary always prints to stderr. bun src/analyze-cli.ts <url> > report.json saves the report while the summary still shows in your terminal.
  • One flag, --full (the faithful Report). It fixes the session knobs (keyframes 4, settleMs 500 → a ~2 s sample window); to tune sampling depth/window, dithering sensitivity (pixelThreshold), or to log in before sampling, use the embed path.
  • Offline — re-analyze a saved recording with no browser: bun src/cli.ts <recording.json>.

Read the full file on GitHub · 221 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 221 lines · 190 tokens per session scan A 6f502957dc77

Subscribe to this mod's changes

visual-aspect-analyzer is a skill published in the GitHub repository tale-project/tale (23 stars, last pushed 2d ago), licensed MIT. It adds 190 tokens to every session and 3,957 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

audit-event

Use when adding or changing an audit event, the audit log schema, SIEM export, or anything writing to auditevents. Also use when adding a code path that grants or denies access, since denials are events. Triggers on "audit", "audit log", "auditevents", "SIEM", "journal", "access log", "who read what".

nacre-work/nacre · 77 tokens

db-migration

Use when changing the PostgreSQL schema, adding a migration under packages/core/migrations, or touching row-level security, the grants table, tombstones, or the audit table. Triggers on "migration", "schema", "DDL", "RLS", "row level security", "ALTER TABLE", "new column", "index" in a database context.

nacre-work/nacre · 76 tokens

mcp-tool

Use when adding or changing an MCP tool, the MCP transport, or MCP authorization in packages/mcp — tool schemas, tools/list, the Streamable HTTP endpoint, STDIO mode, OAuth, CIMD, EMA, or ID-JAG. Triggers on "MCP tool", "tools/list", "Streamable HTTP", "Mcp-Method", "CIMD", "DCR", "EMA", "ID-JAG", "resource server"…

nacre-work/nacre · 110 tokens

open-core-boundary

Use when deciding whether a feature belongs in this open-source repository or in the private nacre-enterprise one, when adding an extension point, or when a change touches multi-tenancy, SSO, SCIM, document-level deny rules, EMA/ID-JAG, the audit log, the global admin, or quotas. Triggers on "enterprise"…

nacre-work/nacre · 107 tokens

authz-change

Use when changing anything under packages/core/authz, the grants table, the effective-principals cache, or the vector pre-filter — the permission resolver, deny handling, scope inheritance, ACL tags, or the T1-T25 suite. Also use when a change elsewhere could affect who can see what, such as touching search filters…

nacre-work/nacre · 119 tokens

config-var

Use when adding, renaming, or removing an environment variable, changing startup configuration validation, adding a Compose profile or service, or adding a Prometheus metric. Triggers on "environment variable", "NACRE", "config", "docker compose", "profile", "metrics", "healthcheck", "readiness".

nacre-work/nacre · 68 tokens