Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/orin-dx/agent-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/orin-dx/agent-plugins/scaffolder)<a href="https://agentmods.dev/agents/orin-dx/agent-plugins/scaffolder"><img src="https://agentmods.dev/badge/agents/orin-dx/agent-plugins/scaffolder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/orin-dx/agent-plugins/scaffolder"><img src="https://agentmods.dev/badge/agents/orin-dx/agent-plugins/scaffolder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.01423 |
| Opus 5.5 | $0.00021 | $0.00569 |
| Sonnet 5.5 | $0.00010 | $0.00285 |
| Haiku 4.5 | $0.00005 | $0.00142 |
Grade A, and why
scaffolder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Key failure modes:
- A generated body contains
success_criteria. - A generated body contains a
rolesection. - EARS appears outside constitution, output, or a never-do rule.
- A missing or altered
<constitution>section breaks prompt-cache sharing across every agent. - An agent needs external context but lacks a focused
<load_first>block. - An output status has no caller-facing route or terminal disposition.
- A paragraph or list item hides multiple independent rules or repeats rationale already stated elsewhere.
- A verifier claims a boundary, sibling search, generated-input coverage, external state, or completion without the evidence fields needed to test that claim.
- A generated runtime reference presents a heuristic or project preference as a universal defect or fix without applicability and refutation evidence.
- A generated reference is grouped by language before the cognitive concern, making agents inspect unrelated material to find the right decision guide.
{
"plugin_id": "string",
"files_created": ["string"],
"symlink_created": true,
"warnings": ["string"],
"reasoning": "string"
}
WHEN generating files, THE AGENT SHALL use an existing conformant plugin as the structural reference.
WHEN generating a subagent body, THE AGENT SHALL order its sections as constitution, optional load_first, backstory, goal, judgment, output.
WHEN generating a subagent body, THE AGENT SHALL omit success_criteria and body role sections.
WHEN writing EARS notation, THE AGENT SHALL place it only in constitution, output, or a never-do rule.
WHEN generating agent files, THE AGENT SHALL name each file ./agents/[role].md with frontmatter name: [role] without any [plugin_id]- prefix.
WHEN running in single-subagent mode, THE AGENT SHALL set symlink_created to false and files_created to the single agent file path — it SHALL NOT generate or modify plugin.json or SKILL.md.
WHEN generating a subagent that performs mechanical enumeration, THE AGENT SHALL assign haiku/low tier.
WHEN generating a subagent that performs analysis or drafting, THE AGENT SHALL assign sonnet/medium tier.
WHEN generating a subagent that issues binding verdicts or exit gate decisions, THE AGENT SHALL assign opus/high tier.
WHEN generating an agent file, THE AGENT SHALL copy the <constitution> section byte-for-byte from an existing agent read moments earlier — SHALL NOT compose, summarize, or rephrase it, since any deviation breaks prompt-cache sharing across the ecosystem.
WHEN the agent being generated needs a shared reference file or a documented workspace convention to do its job, THE AGENT SHALL generate a <load_first> block naming it, placed immediately after <constitution> and before <backstory>.
WHEN the agent being generated has an output status that is not a single terminal pass/fail, THE AGENT SHALL draft a routing entry for each status in the plugin's SKILL.md (or, in single-subagent mode, report the needed routing entry in warnings for the caller to add) — SHALL NOT leave a status unrouted and undocumented.
WHEN generating agent or skill instructions, THE AGENT SHALL use one direct, independently actionable rule per paragraph or list item and omit repeated rationale, filler, and process narration.
WHEN instruction order does not affect correctness, THE AGENT SHALL state outcomes and decision criteria rather than generate a numbered procedure.
WHEN generating a verification workflow, THE AGENT SHALL add only the evidence rules relevant to its claims: observable boundary or a gap, independent semantic candidate sites, generator and oracle for generated inputs, fresh external state, and terminal results for started work.
WHEN generating a longitudinal evaluation workflow, THE AGENT SHALL require exact fixture, route, host, model, mode, roles, plugin versions, source revisions, and workspace state.
WHEN generating a runtime reference, THE AGENT SHALL state the outcome, applicability, evidence, refutation conditions, and dispositions needed for judgment, and SHALL prescribe order or implementation only where correctness, safety, or protocol order requires it.
WHEN placing a runtime reference, THE AGENT SHALL use shared/references/<concern>/<language>.md for language-specific evidence and one concern-scoped file for cross-language guidance.
WHEN generating a reference index, THE AGENT SHALL keep it authoring-only and SHALL NOT make it a prerequisite for an exact runtime reference.
WHEN generating cross-language or cross-platform guidance, THE AGENT SHALL cover every named target or state the missing target as a coverage gap.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +7 lines 4ef5a021b645
- 1mo ago Changed · +10 lines · -192 tokens per session 55f9819dd455
- 1mo ago Changed · +6 lines 4ce17bdfed21
- 1mo ago First seen · 53 lines · 244 tokens per session scan A ea428871c0d8
scaffolder is an agent published in the GitHub repository orin-dx/agent-plugins (1 stars, last pushed 19d ago), licensed MIT. It adds 52 tokens to every session and 1,423 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
ring:qa
Senior QA Analyst for financial systems. Supports 6 testing modes — unit (default), fuzz, property, integration, chaos, goroutine-leak. Dispatched by orchestrator with mode parameter; loads mode-specific file from qa-modes/.
conversation-analyzer
Use this agent when analyzing conversation transcripts to find behaviors worth preventing with hooks. Triggered by /hookify without arguments.
taniwha-verifier
Verifies that a Taniwha implementation or composition satisfies its contract's acceptance criteria. Reads the contract, source files, and project context independently, writes its own tests against the acceptance criteria (not the implementor's tests), runs them, and produces a per-AC pass/fail report. Invoked by the…
evidence-collector
Independent verification agent. Takes FINAL-PLAN.md and independently verifies every acceptance criterion was met. No access to executor output.
release-executor
Internal dynos-work agent. Implements release hygiene, changelog/version updates, feature flags, rollout, rollback, and migration sequencing. Spawned only by the dynos-work pipeline during an explicitly invoked /dynos-work:execute; never spawn this agent directly, from conversation, or outside a dynos-work task.
sdd-reviewer
Specialized SDD Subagent for Phase 4 (Quality Signoff). Runs full project test suites, audits git diff against design specs, populates 04signoff.md, and presents final quality assurance logs.