Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add ihudak/ihudak-claude-plugins/plugin install dev-workflowsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/ihudak/ihudak-claude-plugins/design)<a href="https://agentmods.dev/commands/ihudak/ihudak-claude-plugins/design"><img src="https://agentmods.dev/badge/commands/ihudak/ihudak-claude-plugins/design.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00110 | $0.09935 |
| Opus 5 | $0.00055 | $0.04967 |
| Sonnet 5 | $0.00022 | $0.01987 |
| Haiku 4.5 | $0.00011 | $0.00993 |
Grade A, and why
design scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 480 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Author an engineering design for the resolved item: $ARGUMENTS
/design is the Dev-phase engineering-design workflow — the design step of the PM→PA→PE→Dev pipeline
(/specify → specification.md; then /design → design.md). The developer takes over a merged
specification.md, grounds in the fully-mounted implementation code, and authors a reviewed
engineering design.md through a relentless one-question-at-a-time grill that challenges the spec
and designs the implementation. It gates on the Opus design-reviewer and offers to land
design.md + the spec's engineering-review edits on the specs repo's main branch (via branch + PR) so
/implement can plan and build from it.
Key distinction from /specify: /specify (PE) authors the requirements spec and grounds lightly
(soft repo gate); /design (Dev) challenges that spec and designs the implementation, and must see
all implementation repos — its repo gate is strict (hard-stop on any unmounted repo).
Flags: --design-twice forces the Phase 5 interface fan-out on the run's load-bearing interface, even when no contested-interface signal fired (references/design-format.md ## Seams).
Phase 0 — Resolve input
-
Resolve the address — strip every recognised flag first.
--design-twiceis removed from$ARGUMENTSbefore anything else, exactly ascommands/idea.md's Phase 1 strips its own: an unstripped flag is read as the positional token and resolution then fails on a token that was never an address.Parse the single positional address from the stripped
$ARGUMENTS— a<KEY>, or an@<path>naming a folder or a file inside one — and resolve it withresolve-address(${CLAUDE_PLUGIN_ROOT}/references/addressing.md§3). Carry forward:<PRD>— the resolved PRD folder'skey: the folder itself when the address named aPRD-folder, its parent when the address named anEPIC-folder.<EPIC>— the resolvedEPIC-folder'skey, ornullwhen the address named aPRD-folder. The kind decides the altitude, which is what replaces the two-key grammar: the second key was always derivable from the first.
With no positional address, stop with
DESIGN_NEEDS_KEY: /design needs a PRD or Epic address — a key, or an @<path> to its folder.—/designhas no direct-prompt behaviour. Resolution supplies the address and nothing else:/designreads no document for content at this step — the requirements source of truth is the mergedspecification.mdin the specs repo. -
Resolve
$SPECS_PATH./designreadsspecification.mdand writesdesign.mdunder$SPECS_PATH/specifications/. If$SPECS_PATHis unset, stop with a clear error namingSPECS_PATH(choices: ["Set SPECS_PATH (enter the path)", "Cancel"]).
Specs-repo preflight. Cite ${CLAUDE_PLUGIN_ROOT}/references/specs-repo-git.md and execute its
specs-preflight entry point (§3) inline: flush any leftover session artifacts from an earlier
run, retry an artifact commit that failed to push, and settle the branch. Prompt-free and silent
when the specs repo is clean and on its default branch. If a guard fires, emit its §5 notice; if
it returns specs_git: blocked (§3.3 G0), carry that flag for the whole run — the terminal
commit-artifacts step skips on it.
(The preflight runs here, before the gate below, because require-on-main performs no fetch of its own — §3.2 — and relies on this step's best-effort one. Gating first would test never-fetched refs: a just-merged artifact would be missed on origin/<default> while the stale remote-tracking ref for its deleted branch still carries it, producing a false row D/E stop. specs-preflight self-gates on $SPECS_PATH, so it is safe this early.)
- Map onto the specs repo + require the spec on main. Derive provisional kebab-case slugs from the relevant title(s):
<vslug>for<PRD>, and<eslug>for<EPIC>whenfocus_keyis set.- Resolve the PRD dir: call
resolve-address <PRD>(${CLAUDE_PLUGIN_ROOT}/references/addressing.md§3) and use itspath; onambiguous, stop naming every match and@<path>as the way through. No matching rule is written here — §5 owns it, and it carries the legacy fallback. Use a freshly derivedPRD-<PRD>-<vslug>only onstatus: absent. Every laterspecifications/<PRD>-<vslug>/in this command — the Epic-enumeration ref test included — names the dir resolved here. - Resolve the feature folder by case:
focus_keyset → the per-Epic homespecifications/<PRD>-<vslug>/EPIC-<EPIC>-<eslug>/(same honor-existing tolerance on theEPIC-<EPIC>-<eslug>segment); the target isspecification.mdthere.focus_keynull → resolved in step 4 (Granularity): either the flat PRD dir (a broad PRD-level spec) or a per-Epic subfolder the picker selects.
- Gate the resolved target on main (the specs repo's default branch at
$SPECS_PATHis the handoff surface, verified againstorigin/<default>by ref — never a worktree file-existence check). Executerequire-on-main(${CLAUDE_PLUGIN_ROOT}/references/phase-handoff.md§3) against the resolvedspecification.mdpath — immediately oncefocus_keyis set, or once step 4 resolves the target forfocus_keynull — and map its §3.7 return value bystoppedfirst, never byon_mainalone: any stopping state → stop per §4.4, naming the concrete branch/PR state it reports; otherwise (stopped: false)pass→ proceed;pass_amending→ proceed, printing §3.3's row-B message (this run's own in-progress branch amendsspecification.md, so it legitimately differs from<default>) — proceed as-is, never offering a repair here, since that would discard this run's own in-progress amendments;absent(row F) → stop:DESIGN_NO_SPEC: no specification.md on the specs repo's default branch for <ADDRESS> — run '/dev-workflows:specify <ADDRESS>' and land it there first. <ADDRESS> is this run's own resolved address, one address and no second key (D4).;unmanaged→ behave exactly as before this feature.
- Resolve the PRD dir: call
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +3 lines · -1 tokens per session e359a8e333e4
- 6d ago First seen · 477 lines · 111 tokens per session scan A e403e6ff5aaa
design is a command published in the GitHub repository ihudak/ihudak-claude-plugins (2 stars, last pushed 4d ago), licensed MIT. It adds 110 tokens to every session and 9,935 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
battlecard
Create a sales-ready competitive battlecard — positioning, feature comparison, objection handling, and win strategies.
cloudflare-r2:presigned-url
Generate presigned URLs for secure client-side uploads or downloads.
create_handoff
Create handoff document for transferring work to another session.
pi-code-review
Adversarial code review via Codex — break confidence in changes, not validate them.
watch
You are executing the /hydra:watch command. Live monitoring of all background agents with real-time status updates.
infogenius
Research-First Image Generation - Facts → Visual Prompt → High-Quality Image.