Install
$ agentstack add skill-carlkibler-agent-skills-visual-qa-loop ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Visual QA Loop
For UI work, "tests pass" is not the same as "eyes pass."
Third-order stance: static screenshots are receipts, not the whole truth. Look for temporal debt, hidden friction, and trust changes between states: loading, empty, error, hover, focus, permission prompts, and the moment after a user clicks.
When to Use
- The user asks for visual QA, screenshots, design polish, UI review, hover/focus review, or before/after proof
- A frontend/macOS/iOS UI change might alter layout, copy, color, spacing, or trust perception
- The user wants assurance changes are tweaks, not accidental replacement
When NOT to Use
- Pure backend or CLI changes with no visual surface
- The app cannot be rendered locally and no screenshot path exists
- The user explicitly says not to do visual validation
Phase 1: Pick Stable Targets
Identify the exact pages/windows/states to capture. Prefer the smallest set that covers the changed surface. Include transition states when relevant: loading, empty, error, first-run, disabled, hover/focus, and post-action success/failure.
For web/file targets on this machine, use chrome-shot rather than raw Chrome commands:
mkdir -p ~/dev/agent-notes//visual-qa/
chrome-shot -o ~/dev/agent-notes//visual-qa//home-1440.png http://localhost:3000/
chrome-shot --size 390x1200 -o ~/dev/agent-notes//visual-qa//home-mobile.png http://localhost:3000/
Phase 2: Capture Before and After
If changes are not applied yet, capture before/. After edits/build, capture after/ with the same viewport, route, data, and state.
Use filenames that encode route/state/viewport, not verbose captions. If the issue may be motion/jank, capture a short trace, repeated screenshots, or before/after states around the transition rather than only the final settled UI.
Phase 3: Review Like a User
Check:
- layout shifts, overflow, clipping
- copy drift or confusing labels
- hover/focus/selected states too loud or too invisible
- trust fractures: surprise permissions, privacy creep, pricing ambiguity, destructive actions
- mobile density and tap targets
- empty/error/loading states when relevant
- information density: high-signal details should not disappear behind unnecessary hover/clicks
- temporal debt: flicker, layout shift, stale preview, delayed permission prompt, or post-click ambiguity
- downstream friction: a small visual change near a CTA, filename, price, or destructive action can be larger than its pixel area
Phase 4: Iterate Once Before Reporting
If an obvious regression is visible, fix it and recapture. Do not hand back known-bad screenshots unless blocked.
Phase 5: Report Evidence
Return:
- screenshot artifact paths
- what changed visually
- pass/fail verdict
- any remaining concerns
- any "looks fine but may feel wrong over time" temporal/friction concerns
Keep it short. The screenshots are the receipts.
- Use
trust-auditwhen the visual surface touches permissions, privacy, billing, or destructive file changes. - Use
status-copy-trust-auditwhen UI/CLI wording is the confusing part. - Use
first-contactwhen the visual change touches onboarding or day-zero mental models. - Use
agent-log-forensicswhen recurring user complaints point at visual or interaction jank across sessions.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: carlkibler
- Source: carlkibler/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.