
Product
Socket Now Protects the Firefox Extension Ecosystem
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.
Visual UI design tool for web apps. Make changes in the browser and generate structured reports that AI agents can apply to source code. Works with Vue, React, Svelte, SolidJS, and plain HTML via Vite or Webpack.
Visual UI design and review tool for web apps. Annotate the UI in the browser, inspect and edit styles live, audit runtime issues, and let AI agents apply the resulting structured tasks back to source code.
Supports Vue, React, Svelte, SolidJS, Astro, plain HTML, and htmx on Vite. Webpack support is available through AnnotaskWebpackPlugin for the non-Astro integration path.
You in the browser Your coding agent
------------------ -----------------
Open /__annotask/
Annotate, inspect, edit,
or create audit fixes --> Reads tasks over MCP / CLI / HTTP
Locks task: in_progress
Pulls extra context only when needed
Applies code changes
Marks task review-ready
Review in the task drawer <--> Answers questions / retries denied work
Accept or deny changes
Annotask has three user-facing surfaces.
Tasks can carry grounded context when available:
Install:
npm install -D annotask
Vite:
import { defineConfig } from 'vite'
import vue from '@vitejs/plugin-vue'
import { annotask } from 'annotask'
export default defineConfig({
plugins: [vue(), annotask()],
})
Webpack:
import { AnnotaskWebpackPlugin } from 'annotask/webpack'
export default {
plugins: [new AnnotaskWebpackPlugin()],
}
Start your dev server, then open http://localhost:5173/__annotask/.
Connect an agent over MCP:
npx annotask init-mcp --editor=claude
Or install the bundled skills:
npx annotask init-skills
POST /__annotask/mcp with 18 tools for tasks, design spec, components, screenshots, code context, data context, data sources, and API schemas.annotask status, tasks, task, design-spec, components, component-examples, data-context, data-sources, api-schemas, resolve-endpoint, init-mcp, init-skills, mcp, and more./__annotask/api/* and live updates on /__annotask/ws.Canonical task types live in src/schema.ts:
annotationsection_requeststyle_updatetheme_updatea11y_fixerror_fixperf_fixapi_updateStatuses:
pendingin_progressappliedreviewaccepteddeniedneeds_infoblockedTypical path:
pending -> in_progress -> review -> accepted | denied
\-> needs_info
\-> blocked
applied exists as an optional intermediate automation state and is accepted by the API, CLI, and MCP layers.
themes[], defaultTheme, and per-theme token valuesaxe-core accessibility scanning| Framework | Vite | Webpack |
|---|---|---|
| Vue 3 | Yes | Yes |
| React | Yes | Yes |
| Svelte | Yes | Yes |
| SolidJS | Yes | Yes |
| Plain HTML | Yes | No |
| Astro | Yes | No |
| htmx | Yes | No |
Annotask is dev-only. It does not run in production builds.
Annotask is workspace-aware. When the project lives inside a pnpm, npm, Yarn, Bun, or Lerna workspace, server-side scanners can walk sibling packages for:
For MFE setups, child apps can point at a root Annotask server with annotask({ mfe, server }) or new AnnotaskWebpackPlugin({ mfe, server }).
pnpm install
pnpm build
pnpm dev:vue-vite
pnpm typecheck
pnpm test
pnpm test:e2e
Useful extras:
pnpm dev:shell for standalone shell UI workpnpm test:e2e:stress for the stress-test environmentpnpm stress-test:up / pnpm stress-test:down for Docker-based stress servicessrc/plugin/ - Vite integration and transform pipelinesrc/server/ - HTTP API, WebSocket server, persistence, scannerssrc/mcp/ - embedded MCP serversrc/webpack/ - Webpack plugin and loadersrc/shell/ - Vue shell UI served at /__annotask/src/cli/ - annotask CLIsrc/schema.ts - canonical task, report, design-spec, and context typesskills/ - bundled /annotask-init and /annotask-apply skillsplaygrounds/simple/ - single-framework demosplaygrounds/stress-test/ - multi-MFE, multi-service stress labFAQs
Visual UI design tool for web apps. Make changes in the browser and generate structured reports that AI agents can apply to source code. Works with Vue, React, Svelte, SolidJS, and plain HTML via Vite or Webpack.
The npm package annotask receives a total of 85 weekly downloads. As such, annotask popularity was classified as not popular.
We found that annotask demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.