CtrlK
BlogDocsLog inGet started
Tessl Logo

vannifr/responsive-visual-review

Use when you need a structural visual review of a website across breakpoints (mobile/tablet/desktop) to catch layout breaks, overflow, and spacing issues without a baseline or hosted regression service. NOT for CRO/conversion/copy review, NOT for new UI design work, NOT for automated pixel-diff regression gating in CI, NOT for accessibility/contrast auditing.

62

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

Overview
Quality
Evals
Security
Files
Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

The skill navigates websites via browser automation to capture screenshots for visual review, exposing the agent to arbitrary external web page content.

Where we found it

user-provided target website

content-type · 4 sites

The skill instructs the agent to navigate to arbitrary user-provided URLs via browser automation, capture full-page screenshots, and analyze the rendered content for layout issues, exposing the agent to arbitrary external web page content.

SKILL.md

13

Works on any website (static, SPA, SSR, CMS) — all it needs is a reachable URL (local dev server or live).

SKILL.md

39

1. **Target**: confirm the base URL (local dev server, e.g. `http://localhost:8080`, or a live URL)

SKILL.md

63

For each page × breakpoint combination, capture a **full-page** screenshot (not just the viewport)

SKILL.md

67

Use whatever browser automation is available in the environment: Playwright MCP tools (`browser_resize` + `browser_navigate` + `browser_take_screenshot` with `fullPage: true`), or `browser-use` CLI, or A short Playwright script

Report incorrect finding
Audited
Security analysis
Snyk