Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/pr-pm/prpm/create-slash-commandgit clone --depth 1 https://github.com/pr-pm/prpmWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00010 | $0.00857 |
| Opus 5 | $0.00005 | $0.00428 |
| Sonnet 5 | $0.00002 | $0.00171 |
| Haiku 4.5 | $0.00001 | $0.00086 |
Grade A, and why
create-slash-command scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 156 lines — stays where its author put it; the contents beside it link to each section on GitHub.
🔨 Slash Command Generator
Create a new Claude Code slash command following best practices and latest features.
Command to Create
Name: $1 Description: $2 (or $ARGUMENTS if multi-word)
Requirements
-
Location: Create in
.claude/commands/$1.md -
Structure: Include proper frontmatter with:
description- Clear, actionable descriptionallowed-tools- Minimal required toolsargument-hint- If command takes argumentsmodel- Appropriate model selectioncommandType: slash-command- For PRPM compatibility
-
Features to Consider:
- Arguments: Use
$ARGUMENTS,$1,$2, etc. for user input - File References: Use
@filepathto reference files - Bash Execution: Use
!command`` for inline bash (requiresBashin allowed-tools) - Namespacing: Use subdirectories for organization (
.claude/commands/category/name.md)
- Arguments: Use
Template Structure
---
description: [Brief, actionable description]
allowed-tools: [Minimal list: Read, Write, Edit, Bash, etc.]
argument-hint: [Expected arguments format]
model: [sonnet|haiku|opus|inherit]
commandType: slash-command
---
# [Icon] [Title]
[Clear description of what this command does]
## Instructions
- [Specific, actionable steps]
- [What the command should analyze/generate/modify]
## Output Format
[Describe expected output format, with examples if helpful]
Validation Checklist
Before creating, verify:
- Command name is clear and follows kebab-case
- Description is specific and actionable (not generic)
- Tool permissions are minimal and necessary
- Argument hints provided if arguments expected
- Model selection appropriate for task complexity
- Includes helpful examples or output format guidance
- Uses special features where appropriate (@, !, $ARGUMENTS)
Examples
Simple Command (no arguments)
---
description: Review current file for security issues
allowed-tools: Read, Grep
---
# 🔒 Security Review
Review the current file for common security vulnerabilities:
- SQL injection
- XSS vulnerabilities
- Authentication issues
- Insecure dependencies
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 156 lines · 10 tokens per session scan A 8570e5a3e503
create-slash-command is a command published in the GitHub repository pr-pm/prpm (120 stars, last pushed 2mo ago), licensed MIT. It adds 10 tokens to every session and 857 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
stripe-backend
Centralized LLM prompt instructions for Copilot and Cursor, including scripts to convert and sync rules for Python, React, Shell, and TypeScript. Designed for rapid reuse and contribution across projects.
react-router-client-loader
Do this in a clientLoader and use loaderData to render the component. DO NOT create mock data, new interfaces, or mock data loader functions. Instead, assume loaderData has all of the data you need to render the component.
react
Apply React with TypeScript best practices.
vue3
Apply Vue 3 with TypeScript and Composition API patterns.
checklist
Generate a custom checklist for the current feature based on user requirements.
clarify
Identify underspecified areas in the current feature spec by asking up to 5 highly targeted clarification questions and encoding answers back into the spec.