Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add u-ichi/reviewable-html-workbench --skill visual-html-renderergit clone --depth 1 https://github.com/u-ichi/reviewable-html-workbenchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/u-ichi/reviewable-html-workbench/visual-html-renderer)<a href="https://agentmods.dev/skills/u-ichi/reviewable-html-workbench/visual-html-renderer"><img src="https://agentmods.dev/badge/skills/u-ichi/reviewable-html-workbench/visual-html-renderer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/u-ichi/reviewable-html-workbench/visual-html-renderer"><img src="https://agentmods.dev/badge/skills/u-ichi/reviewable-html-workbench/visual-html-renderer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 74 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 159 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 268 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- medium Agent Snooping · line 453 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 516 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00268 | $0.13364 |
| Opus 5.5 | $0.00107 | $0.05346 |
| Sonnet 5.5 | $0.00054 | $0.02673 |
| Haiku 4.5 | $0.00027 | $0.01336 |
Grade A, and why
visual-html-renderer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 573 lines — stays where its author put it; the contents beside it link to each section on GitHub.
visual-html-renderer
役割
HTML出力系skillの共通レンダラーとして、個別HTML生成ロジックを置き換える。
重い処理は scripts/html_review_workbench/ のPython実装に委譲し、このskillは入力確認、呼び出し順、ガード、検証を担当する。
Role
Use this skill as the shared renderer for HTML-output workflows. It replaces one-off HTML generation logic with a fixed flow: understand the requested content, design the document model, run the shared CLI, validate the bundle, and return a preview URL. Heavy implementation stays in scripts/html_review_workbench/; this skill owns input handling, workflow order, gates, and verification.
Plan Mode 中の計画確認プレビューには、このskillを使わない。その場合は plan-preview を使い、一時HTML previewとして扱う。visual-html-renderer は通常の最終HTML成果物、レポート、レビュー可能な文書のbundle生成だけを担当する。
Do not use this skill for Plan Mode proposal previews. Route those requests to plan-preview; this skill is only for final HTML artifacts, reports, and reviewable document bundles.
Strict procedure profile
- Strictness: strict-procedure。HTML表現設計、文書モデルread-back、render、validate、preview URL提示までがこのskillの成果。
- Hard gates: 外部サービス送信、画像生成、外部アップロード、shared state変更は該当する承認ゲートに従う。
- Forcing function: rendererブロック対応表、render前自己レビュー、
check-modelCLI、Completion receipt。 - Completion receipt: HTML表現設計、生成物、検証、preview、未実施層を最終応答に必ず含める。
言語方針 / Language behavior
Follow the language of the latest user request for progress updates, final responses, preview handoff text, and user-facing summaries. 日本語の依頼には日本語で、英語の依頼には英語で返す。入力本文や引用内容は、ユーザーが翻訳を求めない限り勝手に翻訳しない。HTML内の見出しや本文は、元資料の言語、ユーザーの指定、レビュー対象読者に合わせる。
基本手順
- Plan Mode 中の計画確認プレビュー、
<proposed_plan>の視覚確認、計画URLの追加が目的なら、このskillではなくplan-previewを使う。 - 文書モデルとレンダリングオプションを確認する。
- 文書モデルが未指定の場合は、直前の成果物またはユーザー指定内容を読み、HTML表現設計フェーズで構成を決める。
- 現行rendererのブロック型に合わせて、agentが
document-model.jsonを直接作る。 - 一時的な入力退避が必要な場合だけ
build-modelで source-capture draft を作ってよい。ただし draft は最終モデルではないため、そのままrenderへ渡さない。 - render前に
document-model.jsonを読み返し、未再構成テキストの流し込みやrenderer非対応型の使用がないことを確認する。 image.generation_status=requestedのブロックがある場合は、imagegenskillで画像を生成し、attach-imageCLIで文書モデルへ添付する。check-modelCLIで最終render前の文書モデル品質を検査する。renderCLIでHTML bundleを生成する。validateCLIでHTML、asset、comment schema、図・画像の非空を検証する。- ユーザー向け最終HTMLでは既定で
previewCLIを--mode autoで起動し、返却JSONのurlとstop_commandを最終応答に必ず書く。 - preview 起動直後に、Monitor ツールで
watch-commentsを開始する。これによりブラウザからのコメントを自動検知できるようになる。Monitor 起動コマンド:python3 -m scripts.html_review_workbench.cli watch-comments --root <output-dir>。自前の polling スクリプトではなく、この CLI を使うこと。イベント受信後の処理はreviewable-design-docskill の「コメント自動回答と解決待ちゲート」セクションに従う。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 573 lines · 268 tokens per session scan A 180dbddd0aa5
visual-html-renderer is a skill published in the GitHub repository u-ichi/reviewable-html-workbench (301 stars, last pushed 1mo ago), licensed MIT. It adds 268 tokens to every session and 13,364 once invoked, about $0.0011 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
pdf-parse
Extract text and structure from PDF files into Markdown or plain text. Selects the right tool automatically: xberg for machine-readable PDFs (fast, Rust core, no ML overhead), marker-pdf for scanned or image-heavy PDFs (OCR + layout detection). Includes tool installation, update, and cleanup. Use before any task that…
research-paper
Process an academic paper (PDF or URL) into the agent-knowledge repository. Extracts text, produces a confidence-annotated structured analysis, and integrates findings into the appropriate topic. Use when asked to read, analyse, or integrate a research paper into the knowledge base. Do NOT use for general web pages or…
paper-retriever
Retrieve a scientific paper PDF given an arxiv URL, DOI, or paper title. Downloads to papers/ directory. Handles open-access retrieval (arxiv direct, Chrome print-to-pdf for publisher-direct HTML, Unpaywall, title-based open-repository search); for paywalled papers it hands off to whichever paper-retriever- access…
process-new-papers
Process all unprocessed PDF files in the papers/ root directory. If subagents are available, parallelize across papers immediately after listing them; otherwise process sequentially. Any PDF in papers/ root is unprocessed by convention (processed papers live in subdirectories). Invokes paper-reader on each PDF.
paper-retriever-bookshare
Credentialed-source backend for retrieving books from Bookshare (bookshare.org) into the papers/ collection. Given a book title or ISBN and a target directory name, it searches Bookshare and downloads the EPUB via the published bookshare CLI. Download-only (produces book.epub). Enable only if you have a Bookshare…
paper-retriever-institutional
Paywalled-access backend for paper-retriever. Retrieves a paywalled paper's PDF through an institutional / library subscription (a library proxy such as EZproxy or OpenAthens, or an institutional login), given an identifier (DOI/URL) and the target paper directory name. Invoked by paper-retriever when open-access…