We read every description in its 11 tools, from the live server, and the listing for 2.0.1. 6 checks, no findings.
Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed
Pinned tool set11
None change data · none can delete. Each tool is fingerprinted; every rescan compares against these hashes. Dashed access is read from the name.
Tool
Access
Description
Pinned hash
audit_url
read
Audit Live URL · Fetches a public HTTPS page and performs a non-exhaustive static review of its HTML, returning prioritized issues and fix guidance. Use it when the user requests an audit of a deployed public page. Localhost, private networks, and plain HTTP URLs are refused. It does not execute the page, measure live Core Web Vitals, or certify accessibility.
sha256:6827…32ec
check_rule
read
Check Rule Compliance · Checks a code snippet against one named frontend rule using static heuristics and returns findings and verification guidance. Without code, returns manual verification guidance. Use it when the user requests a check of a specific rule or a proposed fix. Results do not establish rendered-state or runtime conformance.
sha256:1ff3…699a
explain_rule
read
Explain Frontend Rule · Explains one frontend rule, including its background, impact on users and the business, and related categories. Use it when the user asks why a practice matters or requests educational context. It returns explanation guidance rather than applying a fix.
sha256:0f52…1c94
fix_rule
read
Get Rule Fix · Returns step-by-step remediation guidance and priority for one named frontend rule. Use it when the user requests implementation or fix instructions for a known issue. Optional codeSnippet provides context; the tool does not edit files or apply changes.
sha256:7f73…e5e2
get_checklist_rules
read
Get Checklist Rules · Returns titles, priorities, verification and remediation prompts for every rule in a curated checklist. Use it when the user requests guidance for an entire checklist. includeContent optionally adds each rule’s long-form body. Available checklists: accessibility-essentials, comprehensive-audit, core-web-vitals, html-foundations, image-optimization, javascript-resilience, launch-checklist, performance-quick-wins, privacy-and-consent, security-audit, seo-audit, testing-checklist.
sha256:9104…d9e4
get_quick_reference
read
Get Quick Reference · Returns a compact checklist for one frontend category, filtered by priority and formatted as JSON, Markdown, or a task list. Use it when the user requests a concise checklist for a deployment, review, or team handoff.
sha256:cce2…2efe
get_rule
read
Get Rule Guidance · Returns complete guidance for one known rule slug: requirements, rationale, verification and remediation prompts, code examples, sources, and related rules. Use it when the user requests detailed guidance for a specific frontend rule. Unknown slugs return similar suggestions.
sha256:87e1…22bd
get_workflow
read
Get Audit Workflow · Returns the ordered steps of a curated audit workflow, including rule slugs, priorities, and categories. Use it when the user requests a structured audit such as a pre-launch checklist. Available workflows: accessibility-essentials, comprehensive-audit, core-web-vitals, html-foundations, image-optimization, javascript-resilience, launch-checklist, performance-quick-wins, privacy-and-consent, security-audit, seo-audit, testing-checklist.
sha256:6489…0a06
list_categories
read
List Rule Categories · Lists available frontend rule categories, their descriptions, and rule counts. Use it when the user asks what the checklist covers or needs valid category names.
sha256:1f19…9327
review_code
read
Review Frontend Code · Runs a non-exhaustive static heuristic review of pasted HTML, CSS, or JavaScript against multiple frontend best practices and returns prioritized issues, fix guidance, and suggestions for manual verification. Use it when the user requests a review, audit, or debugging of source code. An empty issue list means no provable static issue was found; it does not establish accessibility conformance or runtime correctness.
sha256:bfc7…6f4d
search_rules
read
Search Frontend Rules · Finds frontend rules by keywords, category, and priority, returning paginated slugs, titles, and short summaries. Use it when the user requests relevant practices for a technology, concern, or pattern, such as web fonts or accessible forms.
sha256:edb8…c20f
Set pinned as sha256:db01…f5d4 · still listed 7 h ago
History
Every scan of this listing, newest first.
Oct 26, 2026 · ChangedVersion 2.0.1 · no findings
Passed
Oct 26, 2026 · Tools changedVersion 2.0.1 · no findings
Passed
Oct 25, 2026 · First scanVersion 2.0.1 · no findings
Passed
Every rescan is logged, even when nothing changed.
