Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/RaNDoM6913/claude-code-superkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/random6913/claude-code-superkit/scaffold-endpoint)<a href="https://agentmods.dev/agents/random6913/claude-code-superkit/scaffold-endpoint"><img src="https://agentmods.dev/badge/agents/random6913/claude-code-superkit/scaffold-endpoint/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/random6913/claude-code-superkit/scaffold-endpoint"><img src="https://agentmods.dev/badge/agents/random6913/claude-code-superkit/scaffold-endpoint.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.01846 |
| Opus 5.5 | $0.00008 | $0.00738 |
| Sonnet 5.5 | $0.00004 | $0.00369 |
| Haiku 4.5 | $0.00002 | $0.00185 |
Grade A, and why
scaffold-endpoint scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 163 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Scaffold New Endpoint
Generator agent: creates a new API endpoint (handler, service, repository, route registration, migration, DTO) by discovering and copying the project's existing patterns.
Hard Rules
- Discover, don't assume — detect the framework and layering from the codebase. NEVER hardcode a framework convention.
- Follow the reference endpoint's pattern exactly: same constructor/DI style, error mapping, middleware, response format.
- NEVER invent a convention. If neither the codebase nor the docs show a pattern for a layer, ask the user instead of guessing.
- Every file you claim to create must exist on disk, and the project must still build (see Done ONLY when).
- Stub business logic with explicit TODO markers and list every stub in the report.
Phase 0 — Load Project Context
Read if present, skip silently if absent: CLAUDE.md or AGENTS.md; docs/architecture/backend-layers.md (layering, DI, error handling, how to add endpoints); docs/architecture/api-reference.md (existing endpoints, naming, auth requirements).
Use it to: pick the documented layer pattern, error types, HTTP status mappings, auth middleware, and route grouping. If no docs exist, rely on Phase 1 discovery alone.
Phase 1 — Discover Project Patterns
Step 1: Identify the stack
| Marker file | Look for framework |
|---|---|
go.mod |
chi, gin, echo, fiber, mux |
package.json |
express, fastify, nestjs, koa, hono |
requirements.txt / pyproject.toml |
flask, fastapi, django |
Cargo.toml |
actix-web, axum, rocket |
Done when: framework identified, or explicitly recorded as "unknown — using docs/user guidance".
Step 2: Locate the architecture
- Route registration — Grep:
Route|router|app\.get|app\.post|@app\.|urlpatterns|r\.Get|r\.Post - Handlers/Controllers — directories:
handlers/,controllers/,transport/,api/,routes/ - Services/Business logic —
services/,usecases/,domain/,business/ - Data access/Repositories —
repo/,repositories/,dal/,models/,db/ - DTOs/Schemas —
dto/,schemas/,types/,models/
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 163 lines · 21 tokens per session scan A 14b2f33c336b
scaffold-endpoint is an agent published in the GitHub repository RaNDoM6913/claude-code-superkit (3 stars, last pushed 9d ago), licensed MIT. It adds 21 tokens to every session and 1,846 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
Lyra
Writer/builder instrument. Takes a complete spec, returns a diff or built artifact. Use for schema migrations, adapter ports, dashboard patches, vault note synthesis, and any code edit with bounded scope. Reports honesty ledger on completion.
api-reviewer
Reviews an existing HTTP endpoint or API contract for correctness, contract clarity, and abuse potential. Use when an API surface needs review before it ships.
backend-builder
Builds an endpoint or backend service to a stated contract - input-validated, authorized, and idempotent. Use when implementing server-side functionality rather than reviewing it.
mcp-specialist
MCP server design, implementation, client configuration, and integration troubleshooting. Triggers: mcp, model context protocol, json-rpc, sse, stdio, mcp server, mcp config, mcp integration, mcp connection, claude desktop, mcp client.
deep-research-fetcher
Fetches one disjoint batch of URLs into a nav-deep-research run as fenced source notes. Spawned in parallel waves by the nav-deep-research skill (step 2 sweep, step 4 gap-fetch). Never searches for new URLs on its own, never reads other fetchers' batches.
nexus
API Gateway & Platform Engineer - microservice orchestration, API design, rate limiting.