Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add bearlike/Assistant/plugin install mewbo-apps-builderWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bearlike/assistant/app-builder)<a href="https://agentmods.dev/skills/bearlike/assistant/app-builder"><img src="https://agentmods.dev/badge/skills/bearlike/assistant/app-builder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bearlike/assistant/app-builder"><img src="https://agentmods.dev/badge/skills/bearlike/assistant/app-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.00547 |
| Opus 5.5 | $0.00021 | $0.00219 |
| Sonnet 5.5 | $0.00011 | $0.00109 |
| Haiku 4.5 | $0.00005 | $0.00055 |
Grade A, and why
app-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 56 lines — stays where its author put it; the contents beside it link to each section on GitHub.
app-builder
app-builder is a sub-agent — delegate to it via spawn_agent. Do not design the data model, write the frontend, or author pipelines yourself.
How to invoke
spawn_agent(
agent_type="app-builder",
task="<intent + workspace choice — see below>",
acceptance_criteria="app_ready event emitted",
)
What goes in the task
The sub-agent designs the collections, frontend, and pipelines itself. It handles both live/render apps and periodic/collection-backed apps. Worked pipeline shapes live at ${CLAUDE_PLUGIN_ROOT}/examples/recipes/.
Your task gives it only two things:
- Intent — what the user wants the app to do, in their own terms (what it tracks, who it's for, how often it should refresh).
- Workspace choice — which workspace the app's agents anchor to:
own(a fresh private workspace for this app) orshared(an existing one, named). This is the one structural decision the user makes at creation; pass it through, don't invent it.
# Correct — intent + workspace, no layout
task=(
"Build an app that organizes my inbox into actionable task groups every morning "
"and shows them on a dashboard. Workspace: own."
)
# Wrong — prescribing the data model or the UI
task=(
"Create two collections `emails` and `groups`, a cron pipeline, and a Streamlit "
"page with a sidebar and three tabs..."
)
Do not prescribe collection schemas, the frontend layout, page structure, or pipeline mechanics. The sub-agent owns those decisions — prescribing them fights its judgment and produces a worse app.
After the sub-agent finishes
The app is live the moment app_ready fires. Reply with one sentence — "Done, your app is live." Don't describe what it shows; the user can open it.
What NOT to do
- Do not write frontend code, collection schemas, or pipeline prompts yourself.
- Do not call
activate_skill("app-builder")— that does nothing; usespawn_agent. - Do not describe the app's layout or data model in the task — hand off intent and let the sub-agent design it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 56 lines · 53 tokens per session scan A b57eee86d033
app-builder is a skill published in the GitHub repository bearlike/Assistant (44 stars, last pushed 4d ago), licensed MIT. It adds 53 tokens to every session and 547 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
liter-llm-running-the-proxy
Use when running the liter-llm api OpenAI-compatible gateway — virtual keys, per-key rate limits, budgets, cost tracking, and model routing. Covers the TOML config and the 22 REST endpoints.
vercel-composition-patterns
React composition patterns that scale. Use when refactoring components with boolean prop proliferation, building flexible component libraries, or designing reusable APIs. Triggers on tasks involving compound components, render props, context providers, or component architecture. Includes React 19 API changes.
helix-org-cli
Use the Helix CLI to operate helix-org (bots, topics, processors, chat) and raw REST via helix api. Use when listing/managing org bots, chatting with chief-of-staff or other bots, or calling any authenticated Helix API path.
weather
Get current weather and short-range forecasts for a location. Use for weather, rain, temperature, or travel forecast questions.
django-6-upgrade-guide
Plan, audit, or complete an upgrade from Django 5.x to Django 6. Verify runtime and dependency compatibility, deprecations, settings, databases, migrations, tests, and deployment. Do not use for general Django work, earlier upgrades, frontend styles, or unrelated maintenance.
openai-django-webhooks
Build or debug asynchronous OpenAI Responses API workflows in Django. Use this skill for background requests, signed webhooks, response correlation, persistence, and HTMX status polling. Do not use it for generic OpenAI calls, non-Django consumers, other webhook providers, or frontend-only polling.