Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/chohra-med/expo_boilerplateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/chohra-med/expo_boilerplate/migrate)<a href="https://agentmods.dev/commands/chohra-med/expo_boilerplate/migrate"><img src="https://agentmods.dev/badge/commands/chohra-med/expo_boilerplate/migrate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/chohra-med/expo_boilerplate/migrate"><img src="https://agentmods.dev/badge/commands/chohra-med/expo_boilerplate/migrate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00537 |
| Opus 5 | $0.00000 | $0.00269 |
| Sonnet 5 | $0.00000 | $0.00107 |
| Haiku 4.5 | $0.00000 | $0.00054 |
Grade A, and why
migrate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 39 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Command: migrate — adopt Spec Harness into an EXISTING codebase
Same as
init, but the code already exists. The order flips: index first, so the memory bank and rules describe what's really there, not a blank template. This is capability 3, "if the project already exists, index it into a memory bank."
Invocation
spec-harness index <target> # 1. build the structural index (fast, scripted)
spec-harness init <target> <name> # 2. lay down bank + rules + agents (preserve any existing entry point)
# 3. run the sdd-researcher to enrich the index + fill the bank from real code (agent step)
Steps
-
Index (scripted).
bin/sh-index.shwalks the source roots (src/ app/ lib/ packages/ service/ ...), inventories every source file with its exported symbols, and writesai_rules/context_map.md+ per-rootREADME.inventory.md. This is the skeleton the agents navigate by instead of grepping. -
Scaffold (scripted).
sh-init.shlays down the bank, rules, agents, loop. If aCLAUDE.md/AGENTS.md/.cursorrulesalready exists, merge — append the Spec Harness startup block, preserve the project's rules under a## Pre-existing project rulesheading. Never overwrite blind. -
Enrich (agent). Run the
sdd-researcherto turn the raw inventory into real understanding: what each module does, which symbols are reusable, the patterns already in use. It fills.memory/00/10/20/30from the actual code, and writes stack-correctfrequent_rules.mdfrom the conventions it observes plus researched best practices. Fill, don't leave[TBD]. -
Verify. Diff the inventory file count against the source dirs (the
auditcommand does this as "index drift"). Confirm the bank references real symbols. Confirmfrequent_rules.mdis stack-correct, not copied from another project.
Rule
Skipping the index step on an existing codebase is refused. The index is the layer that prevents hallucination and makes reuse automatic. Without it you have a decorative bank, which is the exact failure mode of every SDD tool that hand-writes its standards.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 39 lines · 0 tokens per session scan A c031f072940a
migrate is a command published in the GitHub repository chohra-med/expo_boilerplate (32 stars, last pushed 7d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 537 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
arc-skill
You are scaffolding a new React Native (Expo) project using the arc-skill architecture.
arc-connect
Connect API layer, storage, state management, authentication, and i18n to an existing React Native Expo project. Use after arc-scaffold to add backend integration. Trigger when the user mentions adding API calls, auth flow, login, storage, state management, internationalization, backend connection, or data fetching to…
arc-scaffold
Scaffold a new React Native Expo project with folder structure, dependencies, TypeScript config, linting, and navigation shell. Use when starting a new mobile app from scratch, when the user says 'create a new app', 'start a project', 'set up React Native', 'init Expo app', or needs project boilerplate. Trigger this…
arc-ui
Add theme system, reusable components, screen layouts, and mobile UX design to a React Native Expo project. Use after arc-scaffold to build the visual layer. Trigger when the user wants to add a theme, dark mode, UI components, buttons, inputs, screen layouts, design system, or visual polish to their React Native app.
arc-audit
Audit a React Native Expo project for mobile UX issues, performance problems, and architecture violations. Use to check code quality against arc-skill best practices. Trigger when the user asks to review code, check for issues, wants a health check, mentions touch targets, accessibility, performance audit, or says 'is…
arc-feature
Add a complete new feature domain to an existing React Native Expo project — types, API module, React Query hooks, screen, and components in one go. Use when adding a new entity like products, orders, chat, users, recipes, or any CRUD resource. Trigger when the user says 'add a feature', 'create a new screen for X'…