Agent skill · Security

ux-audit

Walk through a live web app AS a real user to find usability + behavioural bugs that static reviews miss. REQUIRES proof of interaction (typing, clicking, sending, observing) before any verdict — a sweep that didn't interact terminates with verdict 'Incomplete'. Walks threads, exercises every element, runs the multi-pane stress matrix, visual polish sweep, component perfection checklist, automated a11y (axe-core), pragmatic performance budget (LCP/CLS/INP), scenario battery (11 scenarios), and stress recipes including the real-flavour data battery. Hard gates: console errors/warnings = 0, netw

jezwebgithub.com/jezwebGitHub ↗
claude-codeMIT
Install
npx skills add jezweb/claude-skills --skill ux-audit --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 23
SKILL.md size: 34 KB
Bundled scripts: none
Requires: claude-code-only
Path: plugins/dev-tools/skills/ux-audit/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 954
Language: Python

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

Review
written from the skill's own SKILL.md · Aug 5, 2026

What it does

Walk through a live web app AS a real user to identify usability and behavioural bugs that static reviews miss. It requires proof of interaction before any verdict and terminates with Incomplete if interaction is not demonstrated. It covers extensive checks: multi-pane stress, visual polish, component perfection, automated a11y (axe-core), pragmatic performance budget, a scenario battery, and stress recipes. Each finding includes reproduction steps, evidence path, and suspected code location. Verdicts include Pass, Conditional Pass, Fail, or Incomplete, with strict hard gates and an audit-the-audit meta-check.

How it works

The skill defines a structured, phase-based workflow:

  • Phase 1: Pre-flight with Persona Lock, Browser Tool, URL selection, Viewport setup, and capability tests (screenshot, console read, network inventory, element selector query).
  • Phase 2: Discovery with sitemap crawl, thread inventory, and element inventory per route.
  • Phase 3: Walkthrough including an Interaction Manifest (MANDATORY) that logs typed actions, clicks, verifications, screenshots, and network activity per page. It requires at least one input, a primary action, a modal/detail pane, a console read, and before/after screenshots. It prohibits a Pass verdict without a complete manifest.
  • Phase 4–6: Polish, Stress, Verdict with hard gates and a wrapped findings report. It explicitly Trigger phrases include: 'ux audit', 'walkthrough', 'qa sweep', 'audit the app', 'dogfood this', 'check all pages', 'find what's broken', 'stress the UI'.

When to use it

Use when you need an interaction-first usability and behavior audit of a live web app, especially when you must prove real user interaction and adhere to strict hard gates (e.g., console errors, 5xx networks, layout collapse, axe violations, and performance budgets) before delivering a verdict. The skill requires a claude-code-only environment and is designed to reject rushed reports via the audit-the-audit meta-check.

What it can touch

The skill requires the claude-code tool for execution and mandates integration with real browser tooling to perform interactions, take screenshots, read console output, and inventory network requests. It specifies that each interaction step must log exact timestamps and selectors and that the manifest includes per-page evidence and reproduction details. It relies on a supported tool path for authentication and page interaction as part of Phase 1 capability tests.

Caveats

Hard gates are auto-fail conditions that cannot be downgraded, including any console errors or warnings, 5xx network responses, layout collapse, axe-core violations, and strict performance thresholds. The audit is incomplete if the Interaction Manifest is missing or if phase timings indicate insufficient interaction. The skill requires proof of interaction; otherwise, the verdict is Incomplete. The toolchain must be connected (e.g., Chrome MCP or Playwright MCP) and authenticated; otherwise, the audit cannot proceed.

From the SKILL.md

# UX Audit Walk through a live web app AS a real user. The audit is **interaction-first** — typing, clicking, sending, watching, screenshotting. A static DOM sweep cannot produce a verdict. ## Verdict states The audit ends in exactly one of: - **Pass** — Critical = 0, High = 0, all hard gates green, Interaction Manifest complete. - **Conditional Pass** — Critical = 0, High = 0, all hard gates green, but Medium/Low present. - **Fail** — at least one Critical or High finding, OR a hard gate red. - **Incomplete** — Interaction Manifest missing required entries, a phase wasn't run, OR the audit-the-audit meta-check fires (manifest timestamps clustered < 0.5s apart, screenshots fewer than 2 × routes, console reads fewer than 1 × routes, Phase 3 took < 1m for an exhaustive audit). Not legal to upgrade to Pass even if everything observed looked fine. If the work doesn't include a complete Interaction Manifest, the only legal verdict is **Incomplete**. "It looked OK" is not Pass. A clean Pass with implausible timings is rejected — the agent must redo the audit with real interaction. ## Hard gates These auto-fail the audit. They cannot be downgraded. | Gate | Threshold | Severity if violate

What's inside
Steps it walks through
  1. Verdict states
  2. Hard gates
  3. Allowlist for known noise
  4. Phases (in order)
  5. Phase 1 — Pre-flight
  6. 1. Persona Lock
  7. 2. Browser tool
  8. 3. URL
  9. 4. Viewport
  10. 5. Capability tests
  11. Phase 2 — Discovery
  12. Sitemap crawl
  13. Thread inventory
  14. Element inventory
Ships with 22 files
  • references/a11y-automation.md
  • references/audit-config.md
  • references/audit-output-discipline.md
  • references/auth-expired-handling.md
  • references/browser-tools.md
  • references/data-seasoning.md
  • references/interaction-manifest.md
  • references/live-interaction-smoke.md
  • references/long-running-check-in-pattern.md
  • references/multi-pane-stress.md
  • references/perfection-checklist.md
  • references/performance-budget.md
  • references/persona-lock.md
  • references/playwright-killer-flows.md
  • references/project-adaptation.md
  • references/report-template.md
  • references/round-trip-workflows.md
  • references/scenario-tests.md
  • references/stress-test-recipes.md
  • references/visual-polish.md
  • references/walkthrough-checklist.md
  • references/workflow-comprehension.md
More from claude-skills
All skills →
About this skill
What does the ux-audit skill do?

Walk through a live web app AS a real user to find usability + behavioural bugs that static reviews miss. REQUIRES proof of interaction (typing, clicking, sending, observing) before any verdict — a sweep that didn't interact terminates with verdict 'Incomplete'. Walks threads, exercises every element, runs the multi-pane stress matrix, visual polish sweep, component perfection checklist, automated a11y (axe-core), pragmatic performance budget (LCP/CLS/INP), scenario battery (11 scenarios), and stress recipes including the real-flavour data battery. Hard gates: console errors/warnings = 0, netw

How do I install it?

Run `npx skills add jezweb/claude-skills --skill ux-audit --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From jezweb/claude-skills, a repository with 954 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going