Borrowing it
Nothing to install: this file belongs to rex/mcp-rancher. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/rex/mcp-rancher/main/.claude/commands/scaffold.mdgit clone --depth 1 https://github.com/rex/mcp-rancherWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/rex/mcp-rancher/scaffold)<a href="https://agentmods.dev/commands/rex/mcp-rancher/scaffold"><img src="https://agentmods.dev/badge/commands/rex/mcp-rancher/scaffold.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00015 | $0.02289 |
| Opus 5 | $0.00008 | $0.01144 |
| Sonnet 5 | $0.00003 | $0.00458 |
| Haiku 4.5 | $0.00002 | $0.00229 |
Grade C, and why
scaffold scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
contains a blocked pattern (e.g. mentioning `rm -rf /` in a PR Copies of this mod
1 near-identical copy found in the catalogue:
- scaffold — 100% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 229 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/scaffold — fresh agent-ready repo bootstrap
This command runs the full greenfield bootstrap top-to-bottom in this session. The user invoking it IS the consent — proceed without any "are we doing this?" check.
Step 0 — Detect git environment
Slash commands assume nothing about the working tree. Detect first:
git rev-parse --is-inside-work-tree 2>/dev/null # is this even a git repo?
git symbolic-ref --short HEAD 2>/dev/null # current branch (empty = detached)
git worktree list 2>/dev/null # main checkout vs worktree?
git config --get remote.origin.url 2>/dev/null # remote URL (empty = no remote)
What matters:
- Detached HEAD or git worktree: every PR's
git checkout -b chore/...step will fail with "already used by worktree" or create an orphan branch. Adapt: skip the branch-creation step in each CHECKLIST and push withgit push origin HEAD:<trunk>(where<trunk>ismain,master, or whatever VIBE.yaml says). - No remote: push steps no-op silently. Surface that and ask the user to add a remote, or proceed without push.
- Trunk-based development: if
VIBE.yaml.workflow.branch_strategy: trunkexists, skip ALLgit checkout -bsteps and commit directly on the current branch.
Scaffolding a fresh dir? You'll git init later in Step 2 — none of the
above applies yet.
Step 1 — Discovery (inline)
Ask only what you can't answer from context (fresh dir = ask all of
Q1–Q5). Persist answers to .claude/session-context.md at the end.
Q1 — required: what's the goal of this session?
- a) Quick task / single edit — exit
/scaffold, do the small thing. - b) Just a question / chat — exit
/scaffold, answer. - c) Iterate on existing agent-collab project — read existing
VIBE.yaml, skip to Step 3. - d) Retrofit existing repo — exit
/scaffold; tell user to run/retrofit. - e) New greenfield project — continue with Q2–Q5.
- f) Other / write-in — parse free-text, propose a mode, confirm.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · -36 lines 39aab97dba06
- 7d ago First seen · 265 lines · 15 tokens per session scan C 89eff80e3170
scaffold is a command published in the GitHub repository rex/mcp-rancher (1 stars, last pushed today), licensed MIT. It adds 15 tokens to every session and 2,289 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
deps-audit
Audit project dependencies for vulnerabilities, outdated packages, license conflicts, and supply chain risks — then provide actionable remediation strategies.
discuss
5-phase requirements-elicitation interview that produces an EARS-validated context/ .md.
fix
Universal debugging and fix application with semantic code analysis.
standup
Show a daily standup summary with completed, in-progress, and blocked tasks across all active epics.
design
A command that turns an existing plan into a detailed technical design for building the feature.
tour
Tour this project's memory — what's captured, where it lives, how to recall it (core-memory-kit).