Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/komluk/scaffolding/create-skillgit clone --depth 1 https://github.com/komluk/scaffoldingWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01461 |
| Opus 5 | $0.00000 | $0.00731 |
| Sonnet 5 | $0.00000 | $0.00292 |
| Haiku 4.5 | $0.00000 | $0.00146 |
Grade A, and why
create-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 157 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/create-skill Command
Scaffold a new scaffolding-compatible skill: an interactive flow that creates
skills/<name>/SKILL.md from the canonical template, composes a TRIGGER/SKIP
description, and validates the result.
Usage
/create-skill
Run from the root of the cloned scaffolding plugin repository (the directory
containing skills/, commands/, and validators/).
What It Does
- Locates the plugin root (so the template and validator can be found)
- Collects skill inputs interactively (name, purpose, triggers, SKIP neighbours)
- Validates the name is kebab-case and not already taken
- Scaffolds
skills/<name>/SKILL.mdfromtemplates/skill-template.md - Composes the
descriptionfrontmatter per the Description Contract - Runs
validators/validate-skill.shand reports pass/fail - Hands off to tech-writer for README/CHANGELOG and manifest updates
Apply the skill-authoring skill throughout — it owns the frontmatter contract,
body structure, and the Description Contract referenced below.
Steps
Follow these steps exactly.
1. Find the plugin root directory
PLUGIN_ROOT=""
find_plugin_root() {
local base="$1"
[ -d "$base" ] || return
local latest
latest=$(find "$base" -name "CLAUDE.md" -path "*/scaffolding/*/CLAUDE.md" 2>/dev/null | sort -V | tail -1 | xargs dirname 2>/dev/null || true)
if [ -n "$latest" ] && [ -f "$latest/CLAUDE.md" ]; then echo "$latest"; return; fi
latest=$(find "$base" -name "CLAUDE.md" 2>/dev/null | sort -V | tail -1 | xargs dirname 2>/dev/null || true)
if [ -n "$latest" ] && [ -f "$latest/CLAUDE.md" ]; then echo "$latest"; return; fi
}
# If the current directory is itself a plugin checkout, prefer it.
if [ -d "skills" ] && [ -d "validators" ] && [ -f "templates/skill-template.md" ]; then
PLUGIN_ROOT="$(pwd)"
fi
if [ -z "$PLUGIN_ROOT" ]; then
for base in \
"$HOME/.claude/plugins/cache/komluk-scaffolding" \
"$HOME/.claude/plugins/marketplaces/komluk-scaffolding"; do
found=$(find_plugin_root "$base")
if [ -n "$found" ]; then PLUGIN_ROOT="$found"; break; fi
done
fi
echo "Plugin root: ${PLUGIN_ROOT:-NOT FOUND}"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 157 lines · 0 tokens per session scan A b4dd505dd1ae
create-skill is a command published in the GitHub repository komluk/scaffolding (15 stars, last pushed 27d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,461 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
auto
Intent-classified router, the front door to OrchestKit and the DEFAULT entry point for any goal-shaped request. Classifies a plain-English goal and routes it to the right specialist skill. Routing is never overhead, so use it even when the target skill seems obvious; skip only when already executing inside another…
node-skill
Generate a Claude skill for a ComfyUI custom node pack.
evolve
Cluster hardened instincts into a proposed Command / Skill / Agent (Instinct Engine).
sessions
The work-item ↔ harness-session registry, the five execution-control commands, and the reset that forgets a work item entirely.
autonomy
Set Heimdall autonomy (1=Guided, 2=Checkpoint, 3=Full Auto) — how much the agent does before asking. Use with a number, +/- to cycle, or no argument to show current.
orch
Launch orchestrator mode with subagent delegation, monitoring, mode-aware execution, and chat compression.