# Ops Client > Use when directly operating or verifying a specified real desktop client, or gathering evidence for an isolated client-layer failure; require a verified target, window, and capability, not unexplained or cross-system diagnosis. - **Type:** Skill - **Install:** `agentstack add skill-idaibin-skills-ops-client` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [idaibin](https://agentstack.voostack.com/s/idaibin) - **Installs:** 0 - **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml) - **Latest version:** 0.1.0 - **License:** Apache-2.0 - **Upstream author:** [idaibin](https://github.com/idaibin) - **Source:** https://github.com/idaibin/skills/tree/main/skills/ops-client - **Website:** https://skills.sh/idaibin/skills ## Install ```sh agentstack add skill-idaibin-skills-ops-client ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # Ops Client ## Overview Operate and verify real desktop client windows. Treat platform automation as adapter-specific: the current built-in evidence path is macOS-first, while Windows and Linux require an available platform adapter before equivalent claims can be made. Use `implement-frontend` for UI code changes. ## Workflow 1. Identify the specified client target and action scope: app name, repository path, package/app directory, process, PID, visible window, platform, requested evidence, and whether observation, capture, launch, restart, focus, or a named semantic interaction is explicitly authorized. 2. Run a capability preflight and record available/unavailable/unknown for: - process enumeration and runtime-source inspection; - window enumeration with stable window identifiers; - window-specific screenshot capture; - Accessibility/control-tree inspection and semantic actions; - background-safe operation without stealing mouse/focus; - app launch/restart and permission state. 3. If working from a repository, confirm whether it contains a desktop/client app by checking manifests and source layout such as `src-tauri/`, `tauri.conf.*`, Electron configs, native targets, package scripts, justfile tasks, or README run instructions. 4. Confirm the startup command and runtime source before verification: dev command, debug bundle, release app, Electron/native run command, or `Not found`/`Not verified` when unclear. 5. Select the platform adapter: - **macOS:** identify process/PID and matching `CGWindowID`; capture with `screencapture -x -l` when available; use macOS Accessibility for semantic controls. - **Windows:** require an available UI Automation/window-capture adapter and stable HWND/process evidence; otherwise use Degraded Evidence mode. - **Linux:** require an available AT-SPI/window-manager capture adapter and stable window/process evidence; otherwise use Degraded Evidence mode. 6. Identify the exact real window by process owner, PID, title, bounds, and platform identifier. Do not substitute browser preview evidence. 7. Capture and inspect the real window using the selected adapter before making visual claims. 8. Within the explicitly authorized action scope, prefer background-safe Accessibility/control-tree actions on named controls over coordinate clicks. Verification or capture alone never authorizes pressing a control. 9. Rebuild/restart the intended client instance after relevant UI, bundle, native, or Accessibility changes before re-verifying. 10. Report unsupported platform claims explicitly rather than emulating them with a browser page or cropped screenshot. 11. Use Client Debug Evidence only when the caller supplies an already-isolated client-layer reproduction whose requested output is direct client evidence. Otherwise route unexplained or cross-system root-cause requests back to the caller for diagnosis before operating the client. For an accepted evidence task, verify the real process/window/build source, collect direct client evidence, clean disposable task state, and return the evidence to the caller. ## Modes - **Capability Preflight:** verify platform, permissions, process/window enumeration, capture, Accessibility, and restart support before operation. - **Launch Review:** identify the repository-owned client app and startup command before running or verifying it. - **Window Evidence:** prove process, runtime, real-window identity, platform adapter, and screenshot source. - **Interaction:** use Accessibility/control-tree paths before coordinate clicks. - **AI-Operable UI Evidence:** verify semantic controls and stable names so agents can identify critical actions reliably. - **Client Debug Evidence:** only after caller delegation of an already-isolated client-layer evidence request, reproduce on the verified real client instance, capture process/window/build/control evidence, test one client-layer hypothesis at a time, and return evidence to the caller without owning the final cross-system root cause. - **Degraded Evidence:** when the required platform adapter or permission is missing, report only process/repository evidence that can be proven and list exact blocked claims. ## Do Not Use For - Plain browser pages, web previews, form workflows, downloads, or browser console/network checks; use `ops-browser`. - Frontend implementation, desktop webview architecture, IPC layering, or design-system work; use `implement-frontend`. - Ordinary repository discovery unless the user asks for client launch review, real-window verification, or browser-preview invalidation. - Browser preview evidence when the task requires proof from a Tauri, Electron, or native desktop runtime. - Repository onboarding or map discovery; use `repo-map`. - Future implementation planning; use the host's built-in planning. - Local dirty-tree review or commit readiness; use `repo-review`. - Security-only review; use `audit-security`. - Cross-system root-cause coordination for a frozen, stale, non-responsive, or dev-versus-release failure; use the host's built-in diagnosis, which may delegate real-client evidence collection here. ## Hard Rules - Do not claim cross-platform support from a macOS-only procedure. - Treat observation, capture, launch, restart, focus, and control interaction as separate scopes. A verification request does not authorize launch, restart, focus change, or pressing controls; require an exact target and action before changing client state. - Stop before credentials, account switching, permission grants, destructive or irreversible actions, purchases, or external submission unless the user explicitly authorizes that exact action and target. - Do not treat browser previews, dev server pages, region screenshots, or app-like web tabs as desktop-client evidence unless the user explicitly asks for browser-only checking. - Do not start or restart a client before confirming the startup command source and whether it could disturb an existing app instance, active window, unsaved state, or user workflow. - Do not assume Accessibility or screen-capture permission. Verify the action succeeds or mark it unavailable. - Do not steal the user's mouse, move the pointer, activate unrelated windows, or coordinate-click unless no stable control path exists, the target window is revalidated, and the risk is acceptable. - Prefer semantic controls, accessible names, labels, roles, stable automation identifiers, and repository-supported test ids for critical controls. - On macOS, verify `CGWindowID`, owner/PID/title/bounds, and capture result before calling a screenshot real-window evidence. - On Windows or Linux, require the platform adapter's stable window/process identifier and capture provenance; do not reuse macOS terminology or commands. - If only a process can be proven, do not infer that the requested window is visible, current, or running the new build. - For code changes that add accessibility or automation surfaces, use `implement-frontend` or the relevant native implementation skill; return here for runtime verification. - Re-verify the target process, runtime source, and window after rebuild/restart; stale windows do not prove current code. - Confirm only direct client facts. Do not claim a final cause across frontend, IPC, Rust, database, packaging, or platform layers, and do not decide a permanent fix; return the evidence to the caller. - Remove disposable task state such as temporary probes, injected instrumentation, test windows, and launched test instances when safe. Retain screenshots, logs, traces, and other handoff evidence until they are embedded, archived, or explicitly accepted by the handoff owner; report retained artifact paths/identifiers, embedded evidence, removed disposable state, and anything left running. - Say `Not supported` when no adapter exists for the requested platform capability and `Not verified` when the adapter exists but the check was not completed. ## Output Contract Report platform and selected adapter, capability preflight, specified client target, authorized action scope, repository/client ownership evidence, startup command or `Not found`, target process/runtime, stable real-window identity, screenshot source/provenance, interaction method, Client Debug Evidence and handoff owner when relevant, permission or adapter gaps, restart/rebuild status, cleanup status, and all `Not supported` or `Not verified` claims. ## References - See [references/usage.md](references/usage.md) for trigger guidance and workflow details. - See [references/eval-cases.md](references/eval-cases.md) for trigger and quality evals. ## Source & license This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [idaibin](https://github.com/idaibin) - **Source:** [idaibin/skills](https://github.com/idaibin/skills) - **License:** Apache-2.0 - **Homepage:** https://skills.sh/idaibin/skills Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/skill-idaibin-skills-ops-client - Seller: https://agentstack.voostack.com/s/idaibin - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.