Borrowing it
Nothing to install: this file belongs to Black-coffe/vulyk. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Black-coffe/vulyk/main/.claude/commands/vulyk-build.mdgit clone --depth 1 https://github.com/Black-coffe/vulykWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/black-coffe/vulyk/vulyk-build)<a href="https://agentmods.dev/commands/black-coffe/vulyk/vulyk-build"><img src="https://agentmods.dev/badge/commands/black-coffe/vulyk/vulyk-build/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/black-coffe/vulyk/vulyk-build"><img src="https://agentmods.dev/badge/commands/black-coffe/vulyk/vulyk-build.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.02996 |
| Opus 5.5 | $0.00017 | $0.01198 |
| Sonnet 5.5 | $0.00008 | $0.00599 |
| Haiku 4.5 | $0.00004 | $0.00300 |
Grade A, and why
vulyk-build scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 135 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Build: "$ARGUMENTS" (default: the newest spec under docs/specs/ whose plan.md carries **Briefed:**
or **Approved:** and no **Branch:**).
plan.md's **Tier:** picks the path: Tier 1-2 solo, Tier 3-4 hive. Every cycle.sh verb prints one
JSON object as its last stdout line; decide from its ok, next and status, never from prose. Bash
calls that run advance or close-story carry timeout: 600000. After each call print one line: the
verb, advance's steps, and next.
Solo (Tier 1-2)
No driver, no clerk, no court. Loop:
bash scripts/cycle.sh advance docs/specs/<slug>. It runs every mechanical step (branch, open-round, judge, the repair story) up to the next thing only an agent can do, and names itnext.build:<W>: takestatus.wave_storiesin order. For ared: requiredstory, first write its test (the file## Filesnames) andred_reason:, then runbash scripts/cycle.sh stamp-red <file>(no--stamp), and only then implement: no implementation edit before the receipt, never a staged break to produce a red. Its exit-4 messages are the workers' (.claude/agents/worker-code.mdstep 6) and handled the same way; where a worker returnsNEEDS_CONTEXT, stop for the owner. For each story, implement it yourself (its## Filesonly; a bug fix runsbash scripts/symbol-map.sh <file> --story <story>on a root file before editing it, greps only what it cannot vouch for (names markedtextual, every caller of a file it reportsimports not parsed) and fixes the shared code once; targeted checks while working), add## Implementation notes, setreturned: DONE, and runbash scripts/cycle.sh close-story <file> --commit. On exit 4, read the error, fix, rerun; after three failed reruns write## Findingsand stop for the owner. A repair story (# Repair round <n>) is built the same way; its## Findingsare the conditions to meet. Back to 1.dispatch:review: dispatchlead-reviewwith the Agent tool, withmodel: <r>fromr="$(bash scripts/model-profile.sh --role review)"only when the profile (bash scripts/model-profile.sh) is notsonnet-builds, else no model parameter:Review <slug>, round <round>. Spec: <spec>. Branch <branch> at <head>. Report: .vulyk/reports/<slug>/round-<round>/review.attempt-<k>.mdwith k =status.seat_attempt.review; from round 2 addSince: <since>. Previous round: <spec>/council/round-<round-1>.Thenbash scripts/cycle.sh advance docs/specs/<slug> --ingest. Ifnextis stilldispatch:review, the report was rejected: dispatch once more with therejectedentry'serrorappended, and--ingestagain. Then act on the newnext. A dispatch that returns the Fable-limit refusal (You've reached your Fable limit/model_requires_usage_credits) gets the Fable-limit fallback (below),<where>=round-<round>/review, before--ingest.- Any other
nextis terminal (below).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 589bfc7a3cc7
- yesterday Changed · +5 lines 7bd363562a01
- 2d ago Changed · +26 lines 08d265d8c668
- 3d ago Changed · +1 lines 1f9e9abd6d07
- 10d ago Changed · +9 lines 45efedee36b3
- 13d ago Changed · +1 lines b1e8f4f5a54e
- 21d ago Changed · +3 lines 384e21d577ed
- 1mo ago Changed · +4 lines 1d7ffcc4c7b5
- 1mo ago Changed · +2 lines b15ea6692d47
- 1mo ago First seen · 84 lines · 42 tokens per session scan A cedb6e4e8935
vulyk-build is a command published in the GitHub repository Black-coffe/vulyk (2 stars, last pushed today), licensed MIT. It adds 42 tokens to every session and 2,996 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
audit-agents-skills
Audit quality of agents, skills, and commands in a Claude Code project.
security-audit
Comprehensive security audit of your project AND Claude Code configuration. Analyzes secrets exposure, injection surfaces, dependencies, hook security, and produces a scored security posture assessment.
audit-quiz-coverage
Find quiz coverage gaps from recent guide/CHANGELOG/CC-releases changes and propose new questions.
worktree
Create a git worktree for isolated feature/fix work.
sync
Check guide/landing synchronization status.
diff-docs
Compare official Anthropic docs baseline vs current snapshot (no network — instant).