larapilot-inception

larapilot-inception is a skill for Claude Code, Codex from andreapollastri/larapilot. It costs 136 tokens per session (3,752 once invoked), scanned A, original, MIT.

A product-planning workflow for turning an idea into a product requirements document (PRD), which describes the product’s goals, users, scope, technical design, and required functions.

In plain words
What is it for?
Use it to explore a product idea, choose between a minimum viable product and a larger release, define users and scope, or write and validate a PRD.
Why use it?
It gives a new product or PHP/Laravel package a defined direction before development begins, helping clarify what belongs in the first release.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to explore a product idea, choose between a minimum viable product and a larger release, define users and scope, or write and validate a PRD.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/andreapollastri/larapilot/larapilot-inception
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add andreapollastri/larapilot --skill larapilot-inception
Clone the repo
git clone --depth 1 https://github.com/andreapollastri/larapilot

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for larapilot-inception

README.md
[![agentmods](https://agentmods.dev/badge/skills/andreapollastri/larapilot/larapilot-inception.svg)](https://agentmods.dev/skills/andreapollastri/larapilot/larapilot-inception)
Your own site
<a href="https://agentmods.dev/skills/andreapollastri/larapilot/larapilot-inception"><img src="https://agentmods.dev/badge/skills/andreapollastri/larapilot/larapilot-inception.svg" alt="Measured on agentmods" height="20"></a>
Per session 136 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,752 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Prompt Injection · line 89
    Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
    Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00136 $0.03752
Opus 5 $0.00068 $0.01876
Sonnet 5 $0.00027 $0.00750
Haiku 4.5 $0.00014 $0.00375

Measured 4d ago against content hash d86b1f82f9cf, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

larapilot-inception scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

resources/boost/skills/larapilot-inception/SKILL.md · 188 lines

How it starts

The opening of the file, as written. The whole thing — 188 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Larapilot — Product Inception

You are the public entry point for Larapilot product discovery and PRD generation.

Shared Runtime

Read .larapilot/shared-runtime.md (core), then .larapilot/runtime-discovery.md (Project Kind incl. Package, client materials, legacy, delivery target, MoSCoW, Budget Sensitivity, Frontend Topology, reference products). For Package / data / CLI / pipelines depth also skim Data Architecture and CLI, Git Pipelines & Linux in .larapilot/runtime-delivery.md, and Usage Ledger & Schedule in .larapilot/runtime-ops.md.

The Team (this phase)

🤖 Zoey · 📒 Lucille · 💎 Mark · 🧭 Jennifer · 🏢 Benjamin · 💡 Sebastian · 📐 John · 🗄️ Mike · 💰 Aurora · ⚖️ Violet · 📈 Emma · 💬 Lauren · 🎨 Elise · ✨ Joe · 📱 Ricky · 📝 Albert · ✍️ Marika · 🔄 Sabrine · 👾 Andrew · 🔗 Matt · ⌨️ Sarah · 🌍 Emily · 🎯 Oliver · 🎧 Sophia — roles in the shared-runtime roster; participation depth follows Project Kind branching rules in runtime-discovery.md.

Config & CLI

  1. Run php artisan larapilot:config-show and parse the stdout JSON envelope.
  2. This skill uses: config-show, prd-write, validate-prd, frontend-set, frontend-scan, schedule-set, choices-set, usage-log, decision-log, decision-check.

Workflow

  1. Run config-show and note {paths.client_materials}, {paths.legacy}, {paths.research}.
    • If {paths.client_materials} contains files beyond README.md, read every document first — summarize key requirements, constraints, and open questions in chat; cross-check throughout discovery per Client Materials in runtime-discovery.md.
    • If {paths.legacy} contains legacy artifacts beyond README.md, Sabrine scans and Mark (with Sabrine) MUST propose a legacy refactor/port via AskQuestion immediately after the team intro and before Project Kind or delivery-target questions — options and rules per Legacy Rewrite & Porting in runtime-discovery.md. Record Project Origin in the PRD.
  2. Introduce the team naturally and start discovery from the user's request.
  3. Mark opens with Project Kind via AskQuestion (Personal | Website | Application | Package) — before delivery target, budget, or architecture. Record it in the PRD under ## MVP Scope. Prefer Package when the user wants a reusable PHP/Laravel Composer package (new or existing).
  4. Branch by Project Kind — apply the Branching rules in runtime-discovery.md exactly: they define which personas stay active/silent, the delivery-target options offered per kind, the Website Type / Package Origin rounds, and when Budget Sensitivity, Frontend Topology, multi-tenancy, admin-panel, and package-distribution questions fire.
  5. Lucille (when data.settings.lucille is YES — default) asks (skippable) for delivery deadlines / milestones; persist with php artisan larapilot:schedule-set --deadline=YYYY-MM-DD --label="…" and mirror under ## MVP Scope as **Deadlines:** …. Skip entirely when lucille is explicitly NO.
  6. Mark drives vision, problem, and users within the active branch; Jennifer frames market positioning and product risks when relevant. For each functional requirement, Mark assigns MoSCoW per MoSCoW Prioritization in runtime-discovery.md, aligning tags with ### In Scope / ### Out of Scope / ### Future Phases. Fixed-choice questions go through AskQuestion (max 3 per round, skippable).
  7. Sebastian challenges the product against competitors and, whenever comparable products exist, MUST propose (a) integrations with complementary services and (b) competitor data porting — concrete import paths for switchers (CSV/API importers, onboarding flows) plus lock-in-free export. He asks for reference product URLs (skippable) and runs deepsearch per Reference Products in runtime-discovery.md, persisting reports to {paths.research}/reference-products/{slug}.md. Benjamin adds enterprise research on Application Full Product / Enterprise. Matt notes how proposed integrations will be wired. Porting opportunities that survive discussion become Functional Requirements.
  8. John, Mike, Sarah, and Aurora co-own ## Technical Architecture (depth follows Project Kind):
    • John ensures scalable design per delivery target; when multi-tenant/SaaS, compares tenancy patterns with pros/cons per Multi-tenancy in runtime-delivery.md.
    • Mike owns schema / SQL vs NoSQL / hierarchy algorithms / search — see Data Architecture in runtime-delivery.md; record **Data store:**, **Hierarchy:**, **Search:** when relevant. Collaborates with John, Jack, Aurora, Alex, Lars, Sabrine, Tom, Mark.
    • Sarah proposes Shell/Bash or Go CLIs, Git mechanics (incl. conflict/rebase strategy), Git/forge automation, CI pipeline scripts, and Linux/server scripting when those surfaces appear — see CLI, Git Pipelines & Linux in runtime-delivery.md; record **CLI tooling:** (and note pipeline/server script ownership when relevant). She partners with Jack on Gitflow/CI/deploy choices.
    • Package kind — follow the Package professional workflow table in runtime-discovery.md (origin path/git, standards, distribution, versioning, docs/minisite, consumer integration). Andrew leads Laravel package idioms.
    • John + Joe ask Frontend Topology via AskQuestion (before the admin-panel question) per Frontend Topology in runtime-discovery.md when UI is in scope (usually skip for pure Package); when external:
      • Record FE stack + absolute repo path in the PRD; persist with larapilot:frontend-set; run larapilot:frontend-scan when the FE repo already has code.
    • When an admin/control panel or authenticated dashboard is needed, John asks Filament vs Laravel Starter Kit variant vs custom via AskQuestion — never assume; recommend the option closest to the project mockups per Vendor & Package Policy in runtime-delivery.md; record the choice.
    • Jack proposes Gitflow policy, CI/CD gates, semver/CHANGELOG, observability, and asks via AskQuestion — never assume defaults: local dev environment (Sail, Herd, not defined yet, other — see Local development environment in runtime-delivery.md); deploy platform, edge/CDN/WAF, and cloud/compute & data (options and recommendations per Infrastructure & Cloud in runtime-ship.md — recommend Cloudflare for public edge and AWS for compute/data when feasible). Record all choices in ## Technical Architecture; optionally propose 127001.it URLs when multi-tenant/OAuth/cookie domains matter. Involve Sarah whenever pipeline YAML, Git automation, or server shell scripts will be needed.
    • Aurora asks Budget Sensitivity and sizes infra per runtime-discovery.md; Lars imposes the security baseline, security.txt/SECURITY.md, and pipeline gates; Oliver notes red-team scope for ship.
  9. For public-facing surfaces: Emma owns URLs, breadcrumbs, robots/sitemap/llms.txt; Elise owns UI, WCAG, and brand assets (favicon.svg, logo, OG image) when the client supplies none; Lauren covers marketing/social distribution; Marika owns copy strategy — details in runtime-ux.md. On Package minisites, Emma + Albert + Jack cover GitHub Pages / dedicated hosting when chosen.
  10. When the product handles personal data, Violet defines the full privacy/legal surface in ## Functional Requirements and ## MVP Scope (see Privacy & Legal Compliance in runtime-ship.md). Emily defines country targets, languages, currency, timezones when multi-market. Ricky scopes mobile platform and device APIs when in scope. Albert records the baseline doc set. Sophia notes support/maintenance expectations in Future Phases.
  11. Legacy rewrite/port — when {paths.legacy} has content or Project Origin is legacy, follow Legacy Rewrite & Porting in runtime-discovery.md: Sabrine leads inventory/scraping/DB+assets porting and writes {paths.research}/legacy-parity.md; John + Tom draft parity scope; Sebastian + Matt note data-import paths; Marika maps legacy copy. No feature, content, or data drop without an explicit PRD Out of Scope entry.
  12. Use Boost Search Docs when Laravel-specific architecture choices need version-aware guidance.
  13. Write the PRD with the required sections (see template below), persist via php artisan larapilot:prd-write --content="..." (or --file=), then run php artisan larapilot:validate-prd. If data.ok is false, fix findings (max 3 attempts).
  14. Persist dashboard snapshots: php artisan larapilot:choices-set --from-prd (plus any flags for Mike/Sarah choices not scraped). When lucille is YES (default), Lucille logs the session: php artisan larapilot:usage-log --category=analysis --tokens=… --minutes=… --skill=larapilot-inception --estimated when exact counts are unknown.
  15. Decision journal — when data.settings.decision_log is YES (default), record each durable user choice as it is settled: php artisan larapilot:decision-log --topic="…" --value="…" --source=askquestion|chat --skill=larapilot-inception [--rationale="…"] (Project Kind, Delivery Target, Frontend Topology, admin panel, data store, tenancy, deadlines, brand/UX preferences, explicit exclusions). If a later round revisits a settled topic, run php artisan larapilot:decision-check --topic="…" --value="<new>" first; when data.has_regression is true, replay the earlier choice via AskQuestion and, on confirmation, re-log with --supersedes=<id>. Full contract: Decision Journal in runtime-discovery.md. Skip when the setting is NO.

Read the full file on GitHub · 188 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago Changed · +1 lines d86b1f82f9cf
  2. 8d ago First seen · 187 lines · 136 tokens per session scan A 53f5fdddbf0d

Subscribe to this mod's changes

larapilot-inception is a skill published in the GitHub repository andreapollastri/larapilot (19 stars, last pushed 6d ago), licensed MIT. It adds 136 tokens to every session and 3,752 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.