
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
draw2agent
Advanced tools
Draw on your website, let your AI agent see it. Visual context for code generation via MCP.
Draw on your website. Your AI agent sees it.
draw2agent is an MCP server that lets you draw annotations directly on top of your local dev page. When you submit, your IDE agent receives a screenshot, structured DOM data, and annotation context to make precise code edits.
👉 Try it out at: draw2agent.vercel.app
(Note: Video hosted on YouTube. Demo files have been ignored from the repository to save space.)
Cursor (~/.cursor/mcp.json):
{
"mcpServers": {
"draw2agent": {
"command": "npx",
"args": ["-y", "draw2agent"]
}
}
}
Tell your agent:
"Use draw2agent to fix the navbar"
Your Dev Page (proxied)
├── Your original page content
└── Excalidraw overlay (transparent, on top)
├── Draw mode: annotate directly on the page
├── Select mode: interact with the page normally (Esc)
└── Submit: screenshot + DOM + annotations → agent
The MCP server exposes two tools:
| Tool | Description |
|---|---|
launch_canvas | Opens your dev page with the drawing overlay |
get_drawing_state | Returns screenshot, DOM nodes, and annotations |
MIT
FAQs
Draw on your website, let your AI agent see it. Visual context for code generation via MCP.
The npm package draw2agent receives a total of 15 weekly downloads. As such, draw2agent popularity was classified as not popular.
We found that draw2agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.