bb-plugin-authoring

bb-plugin-authoring is a skill for Claude Code, Codex from get-bb/bb. It costs 28 tokens per session (1,073 once invoked), scanned A, original, MIT.

A guide for creating and maintaining BB plugins. A BB plugin is a TypeScript package that can add server behavior, agent functions, user-interface elements, or other supported extensions.

In plain words
What is it for?
Use it when creating or changing a BB plugin, command, tool, service, provider, setting, panel, renderer, message action, or other Plugin SDK feature.
Why use it?
It helps you follow the current Plugin SDK contract and repository process instead of relying on outdated assumptions. It also covers building, testing, and installing plugins.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it when creating or changing a BB plugin, command, tool, service, provider, setting, panel, renderer, message action, or other Plugin SDK feature.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/get-bb/bb/bb-plugin-authoring
About the project

bb is an agentic IDE that lets users control, customize, and automate a software-development environment through a desktop app, web app, command-line interface, or HTTP API. Developers use it to run work in observable threads that can be steered or handed off to other agents. Its catalogue add-ons provide skills and instructions for working with bb.

get-bb/bb · 4,324 stars · on GitHub · getbb.app

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add get-bb/bb --skill bb-plugin-authoring
Clone the repo
git clone --depth 1 https://github.com/get-bb/bb

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bb-plugin-authoring

README.md
[![agentmods](https://agentmods.dev/badge/skills/get-bb/bb/bb-plugin-authoring/github.svg)](https://agentmods.dev/skills/get-bb/bb/bb-plugin-authoring)
Your own site
<a href="https://agentmods.dev/skills/get-bb/bb/bb-plugin-authoring"><img src="https://agentmods.dev/badge/skills/get-bb/bb/bb-plugin-authoring/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for bb-plugin-authoring

Your own site · 80×15
<a href="https://agentmods.dev/skills/get-bb/bb/bb-plugin-authoring"><img src="https://agentmods.dev/badge/skills/get-bb/bb/bb-plugin-authoring.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 28 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,073 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00028 $0.01073
Opus 5.5 $0.00011 $0.00429
Sonnet 5.5 $0.00006 $0.00215
Haiku 4.5 $0.00003 $0.00107

Measured yesterday against content hash f92812030e69, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

bb-plugin-authoring scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/bb-guide/skills/bb-plugin-authoring/SKILL.md · 114 lines

How it starts

The opening of the file, as written. The whole thing — 114 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Author BB plugins

A BB plugin is a TypeScript package that can add server behavior, agent capabilities, host-rendered UI, or a frontend bundle.

Use the current SDK types and repository source as the contract. This skill routes to detailed references, but the installed BB version decides the exact API.

Implement and verify

Inspect the affected package and current SDK declarations to select backend, frontend, or both. Build the plugin and verify the affected contracts and user workflow. Install or reload when a live check is needed for the requested work.

To find where a plugin can extend the app, open the Plugin Guide in bb or at https://getbb.app/plugin-guide.

Use bb plugin new for a new plugin. The scaffold includes frontend files. Remove bb.app and those files when the plugin is headless.

Every new public Plugin SDK surface starts with an experimental_ prefix and an entry in docs/api_to_audit.md. Add its Plugin Guide card and API inventory in the same change.

Read only the relevant reference

Start, package, and release

  • Read references/quickstart.md for the first plugin, manifest fields, branding, plugin ids, builds, installs, and dependencies.
  • Read references/distribution.md for exact API lookup, updates, Git or npm release, multi-plugin repositories, custom marketplaces, and store text.

Backend

  • Read references/backend-foundation.md for the factory (and which reference covers each bb.* member), logging, settings, storage, server information, and host entries.
  • Read references/backend-sdk.md for the bb.sdk area map, threads, plugin metadata, files, terminals, attachments, and calls to another plugin's RPC.
  • Read references/backend-api-index.md to check every public backend, host, AI-service, and test export.
  • Read references/backend-events.md for lifecycle events, the dispatch hook, environment providers, HTTP, RPC, realtime, background services, and schedules.
  • Read references/backend-machines.md for machine providers, core project source setup, enrollment/bootstrap helpers, and server access.
  • Read references/backend-cli-agents.md for CLI commands, input forms, agent tools, agent configuration, and helper AI services.
  • Read references/providers.md only when the plugin registers an agent provider or contributes provider environment variables. Its contract lives in docs/provider-plugin-api.md and docs/provider-bridge-protocol.md in the bb repository.
  • Read references/provider-bridge-api-index.md to check every public provider bridge, bridge-test, and ACP export.
  • Read references/backend-ui-lifecycle.md for host-rendered UI, status, cleanup, and reload behavior.

Read the full file on GitHub · 114 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · +7 lines f92812030e69
  2. 10d ago Changed · +3 lines 778f4c1f137e
  3. 16d ago Changed · +1 lines 7ba393b0a44c
  4. 1mo ago Changed · +2 lines 68d012ef9580
  5. 1mo ago Changed fdaeacb7809b
  6. 1mo ago Changed · -30 tokens per session 8932fd058376
  7. 1mo ago First seen · 101 lines · 58 tokens per session scan A f1f05a0fed14

Subscribe to this mod's changes

bb-plugin-authoring is a skill published in the GitHub repository get-bb/bb (4,324 stars, last pushed today), licensed MIT. It adds 28 tokens to every session and 1,073 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

using-grove

Use when orchestrating Grove workspaces from outside, including creating or supervising host or container agents, steering a fleet, using Grove CLI or MCP tools, or having agents write to each other through the mailbox. Also use when splitting work across workspaces, reviewing a diff from several angles, managing…

bearlike/Grove · 92 tokens

working-in-grove

Use when working inside a Grove workspace, including reporting task phase, updating a workspace or its ticket links, using GROVEPHASEFILE, writing to another Grove agent through the mailbox, or waiting on slow work like CI by registering a watch instead of sleeping. Also use when a worktree has a phase file, when…

bearlike/Grove · 100 tokens

collaborating-on-diagrams

Use when working with an existing .drawio diagram through Grove collaboration. Triggers on opening, reading, editing, updating, stopping, or recovering a diagram in a Grove workspace. Covers revisioned managed writes, XML-preserving edits, collaboration state, conflicts, read-only stop, and container/editor limits.

bearlike/Grove · 68 tokens

mocking-up-in-grove

Use when a visual or frontend task in a Grove workspace needs a mockup approved before code — a new control, a redesigned surface, a layout change. Covers drawing a draw.io mockup through Grove's diagram tools, previewing it in the browser, getting sign-off, filing the approved image on the tracker issue, and handing…

bearlike/Grove · 90 tokens

leading-in-grove

Use when you lead a fleet of Grove teammates toward one deliverable, including deciding how many to spawn and how to split the work, writing their onboarding prompt, getting acknowledgment, running scheduled check-ins, answering their mailbox questions, keeping tickets and your own status compaction-proof, reviewing…

bearlike/Grove · 118 tokens

configuring-grove

Use when configuring Grove for a user or project, including agent rosters, init scripts, containers, private credentials, daemon or MCP setup, or the native-versus-terminal launch of a Claude Code or Codex agent. Also use when resolving config layers, validating a config schema, or explaining why a workspace starts…

bearlike/Grove · 92 tokens