Borrowing it
Nothing to install: this file belongs to asasugar/SuperSpec. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/asasugar/SuperSpec/master/.cursor/commands/ss-create.mdgit clone --depth 1 https://github.com/asasugar/SuperSpecWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/asasugar/superspec/ss-create)<a href="https://agentmods.dev/commands/asasugar/superspec/ss-create"><img src="https://agentmods.dev/badge/commands/asasugar/superspec/ss-create/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/asasugar/superspec/ss-create"><img src="https://agentmods.dev/badge/commands/asasugar/superspec/ss-create.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00027 | $0.01813 |
| Opus 5.5 | $0.00011 | $0.00725 |
| Sonnet 5.5 | $0.00005 | $0.00363 |
| Haiku 4.5 | $0.00003 | $0.00181 |
Grade A, and why
/ss-create scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 129 lines — stays where its author put it; the contents beside it link to each section on GitHub.
User Input
$ARGUMENTS
You MUST consider the user input before proceeding (if not empty).
Outline
The text the user typed after /ss-create is the feature description. Do not ask the user to repeat it unless they provided an empty command.
Guardrails
- Read
superspec.config.jsonfirst → getlang,specDir,boost,strategy,context,branchPrefix,branchTemplate,changeNameTemplate - Pre-task review (refer to AGENTS.md "Before ANY Task"):
- Read
contextfiles, README, architecture docs - Inspect
{specDir}/changes/→ avoid duplicate changes viadepends_on
- Read
- Never create change folders manually — use
superspec create <feature>CLI - Do not write any code during the proposal stage. Only create design documents
Input Parsing Rules
From user input, extract: mode flags, feature name, intent type, developer, lang.
| Extract | Rule | Example |
|---|---|---|
| Mode flags | Detect -b/--boost/boost → boost mode; -c/--creative/creative → creative mode; --no-branch → skip branch; flags can be combined |
/ss-create -b add auth → boost; /ss-create -b -c refactor login → boost+creative |
| Feature name | Remove flags from input, convert remainder to camelCase. Chinese → translate to English first | "add user auth" → addUserAuth; "添加用户认证" → addUserAuth |
| Intent type | Semantic inference from input | add/new/implement → feature; fix/bug/hotfix → hotfix; refactor/optimize → refactor; docs → docs; test → test; build/deps → chore; default → feature |
| Developer | "@username" or "Developer: xxx" → extract (remove "@"). Fallback: git user name | "添加todolist @jay" → user=jay |
| Lang | CJK chars → zh; explicit "zh"/"中文" → zh; "en"/"English" → en; fallback: config lang |
"添加todolist" → zh |
Naming Templates
Config supports custom templates with variables {date}, {feature}, {user}, {intentType}, {prefix}:
branchTemplate(default:{intentType}-{date}-{feature}-{user})changeNameTemplate(default:{intentType}-{date}-{feature}-{user})
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 129 lines · 27 tokens per session scan A bc4338c5501a
/ss-create is a command published in the GitHub repository asasugar/SuperSpec (18 stars, last pushed 7mo ago), licensed MIT. It adds 27 tokens to every session and 1,813 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
iteration-drive
Drive or resume the selected locked iteration through Phase 2→6 — autonomous execute → iteration-close → PR → merge-ready loop → post-merge close. Takes no arguments.
OPSX: Continue
Continue working on a change - create the next artifact (Experimental).
auto-dev
A command that autonomously develops each pending requirement in a shared product blueprint using a requirements-first software-development process.
blueprint
A command for discussing and maintaining confirmed product requirements in one shared product blueprint.
design-to-plan
A command that turns an approved design into a traceable implementation plan. It can use project language settings for the conversation and for generated requirement, specification, plan, and task documents.
feature-00c-abort
Aborta manualmente feature-00c para um short-name. SIGTERM + grace period 60s para persistir state; force-acquire do lock como fallback (FR-025). Marca abortada, gera relatorio parcial, commit local. Idempotente.