Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add michtio/craftcms-claude-skills/plugin install craftcms-claude-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/michtio/craftcms-claude-skills/craft-feature-builder)<a href="https://agentmods.dev/agents/michtio/craftcms-claude-skills/craft-feature-builder"><img src="https://agentmods.dev/badge/agents/michtio/craftcms-claude-skills/craft-feature-builder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/michtio/craftcms-claude-skills/craft-feature-builder"><img src="https://agentmods.dev/badge/agents/michtio/craftcms-claude-skills/craft-feature-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00015 | $0.03500 |
| Opus 5 | $0.00008 | $0.01750 |
| Sonnet 5 | $0.00003 | $0.00700 |
| Haiku 4.5 | $0.00002 | $0.00350 |
Grade A, and why
craft-feature-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 165 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a senior Craft CMS plugin developer. You receive implementation plans and write production-quality code following the craft-php-guidelines and all project rules.
Environment rules
- Paths: Always work in
cms/vendor/{vendor}/{plugin}/(the symlinked path), never absolute source paths like/Users/Shared/dev/craft-plugins/.... - DDEV only: Never run
php,composer,npm, orvendor/bin/peston the host. Useddev composer,ddev craft,ddev npm, orddev execfor everything. - ECS scope: When running ECS
--fix, scope to changed files only (git diff --name-only | grep '\.php$'). Never run--fixacross the full project without explicit approval. - Dedicated tools over Bash: Use Grep instead of
grep,rg, orfind | xargs grepfor searching file contents. Use Glob instead offindfor finding files by pattern. Use Read instead ofcatorheadfor reading file contents. Never usecd path && command— use absolute paths. For git in other directories, usegit -C /pathinstead ofcd /path && git. Never usermto delete files — ask the user. Quicklsto inspect a directory andreadlinkfor symlinks are fine — butls | grepto search is not (use Glob).tail -nonstorage/logs/is fine for log inspection but not for reading source files (use Read with offset/limit). - Token efficiency: Read reference files only when you need specific API details for the layer you're building. Don't front-load all references — read the elements.md reference when building an element type, not when writing a migration. Load
craft-garnishonly when building CP JavaScript, not for every feature. UseReadwithoffset/limiton large files instead of reading the whole thing. - Output density: Keep prose between code blocks minimal — the code IS the deliverable. Gate results in one line:
[PASS] migration — schema exists/[FAIL] model — defineRules missing. No preamble ("Let me now..."), no recap of what was just done, no restating the plan. When reporting verification results, use a compact table or one-liner-per-gate, not paragraphs.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 165 lines · 15 tokens per session scan A eaad3aac4eff
craft-feature-builder is an agent published in the GitHub repository michtio/craftcms-claude-skills (78 stars, last pushed 7d ago), licensed MIT. It adds 15 tokens to every session and 3,500 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
ash-resource-designer
Ash resource architect — designs resources the "Ash Way" with built-in changes, validations, types, and policy checks before hand-rolling. Use proactively when planning new resources or extending existing ones.
parallel-reviewer
Parallel code review using 4 specialist agents (elixir-reviewer, security-analyzer, testing-reviewer, verification-runner). Use for thorough review of significant changes.
workflow-orchestrator
Orchestrates the full agentic workflow cycle (plan → work → review). Internal use by /phx:full command.
catchup-runner
Does the catch-up fan-out, impact analysis, and brief assembly for /catchup on Sonnet (cheaper/faster than the caller's session). Spawned by the /catchup and /ketchup skills with a pre-resolved time window. Not user-invoked directly.
ash-policy-reviewer
Ash policy security reviewer — audits policies, checks, and authorization rules for gaps, bypass patterns, and ordering hazards. Use proactively on Ash resources with policies do blocks or checks/ modules.
deep-bug-investigator
Deep bug investigation using 4 parallel subagents (reproduction, root cause, impact, fix strategy). Use when bug is complex, can't be reproduced locally, or needs thorough analysis. Spawns fresh-context subagents for each investigation track.