[carlrannaberg]

Visualize currently ships oversized vendor bundles and a minified axe program, including a second minified program embedded inside Puppeteer. This changes their packaging to readable local modules while preserving the helper entrypoints and top-level library versions.

The maintained change is limited to a pinned maintainer build, generated parser/Puppeteer/axe modules, an inline axe module loader, notices, and package verification. The inline loader preserves artifacts with inline-only CSP. Users still run the installed skill without npm installation; Node and Chrome requirements stay the same. Culori, jq, hooks, publishing helpers, skill instructions, and the Claude plugin source pin are unchanged.

Most of the diff is regenerated third-party source. The largest generated file is 190,939 bytes; the skill contains 283 files. This addresses the Visualize code-readability/size concerns; it does not claim scanner approval or removal of the remaining jq binary warnings.

Validation:

• Clean npm ci rebuild in a different directory produces byte-identical output hashes.
• Isolated installed-package check, including three existing contrast goldens and positive regressions for inline-only CSP, null CSS globals and shadow DOM.
• 58 old/new finding and exit comparisons: 46 HTML detector fixtures exercising all 51 rules and 12 browser-contrast cases, including cascade, shadow DOM, iframe incomplete results, inline-only CSP and null CSS globals.
• Full axe rule metadata (104 rules) and public function inventory match the original release.
• Existing 72 manifest checks, diagram/overflow/Mermaid self-tests, palette checks, image/slide unit tests, catalog checks, preview freshness and composed previews.
• Node 18.20.8 detector; Node 22.12.0 contrast/geometry; system Chrome and cold managed Chromium acquisition. No production writes.

Focused injection timing: approximately 95ms versus 48ms before (10 alternating samples), about 47ms extra setup for browser checks. Hooks are unchanged. No directory scanner was available to rerun.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}