Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add lonormaly/builders-stack --skill create-a-worktreegit clone --depth 1 https://github.com/lonormaly/builders-stackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lonormaly/builders-stack/create-a-worktree)<a href="https://agentmods.dev/skills/lonormaly/builders-stack/create-a-worktree"><img src="https://agentmods.dev/badge/skills/lonormaly/builders-stack/create-a-worktree/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lonormaly/builders-stack/create-a-worktree"><img src="https://agentmods.dev/badge/skills/lonormaly/builders-stack/create-a-worktree.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00037 | $0.00526 |
| Opus 5.5 | $0.00015 | $0.00210 |
| Sonnet 5.5 | $0.00007 | $0.00105 |
| Haiku 4.5 | $0.00004 | $0.00053 |
Grade A, and why
create-a-worktree scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 55 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create a Builders Stack worktree
Use the repository adapter. It keeps project policy in Builders Stack while the
generic source and runtime lifecycle comes from the single wt0 binary.
Create
- Preserve every existing change in the current checkout.
- Confirm
ops/dev/wt0.sh --versionreports the version pinned in.wt0-versionand Bun 1.3.14 is available. The launcher verifies the release checksum before caching the binary. - From the main checkout, run:
ops/dev/worktree.sh <namespaced-branch>
Use the absolute path it prints. Do not call raw git worktree, copy the repo,
copy node_modules, or share a complete mutable dependency directory.
The wrapper requires copy-on-write source and attaches the verified Bun
prepared environment before reporting the checkout ready.
Work and inspect
- Start the stack only through the checkout's normal project command.
- Use
ops/dev/wt0.sh doctor <path>when storage or dependency sharing is in doubt. - Keep the returned branch and path as the runtime identity for later cleanup.
- Treat Finder and
duas logical size only. Use the Worktree Zero physical receipt when reporting actual disk allocation.
Remove
After the patch is present in origin/main, leave the checkout and run:
ops/dev/worktree.sh --rm <branch>
The adapter refuses dirty source, unknown ignored files, live processes,
unmerged patches, and unpreserved merge commits. Never force past a refusal.
Use ops/dev/worktree.sh --gc to evaluate finished managed worktrees; it keeps
anything that fails the same safety checks. Provenance for these checks isn't
tied to the wrapper alone: a worktree created straight through wt0 create or
wt0 run (bypassing this wrapper entirely) is just as safely removable — wt0's
own fleet record proves ownership in place of the wrapper's marker file. Prefer
ops/dev/worktree.sh <branch> above for the extra guardrails (Bun-version
floor, prepared environment, worktree cap, free-disk floor), but a bare
wt0 create/wt0 run checkout still tears down cleanly through wt0 remove.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 55 lines · 37 tokens per session scan A f126ca0b8ba4
create-a-worktree is a skill published in the GitHub repository lonormaly/builders-stack (42 stars, last pushed 1mo ago), licensed MIT. It adds 37 tokens to every session and 526 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
add-to-project
Add addons, tooling or a workspace package to an existing Better-T-Stack project, such as PWA, Tauri, Starlight or Fumadocs docs, Biome, Oxlint, Ultracite, Husky, Lefthook, Turborepo, Nx, the MCP or Skills addon, or a shared packages/ . Use when the project has a bts.jsonc file and the user wants to extend it or add…
safe-extraction
Apply when extracting code from a large monolith file into submodules. Covers barrel re-exports, internals DI seam proxy patterns, CI invariant allowlist updates, and cross-file test verification. Prevents CI failures, broken imports, and test regressions from code extraction.
releasing-weaverse-sdks
Use when releasing @weaverse/ npm packages, bumping SDK versions, publishing to npm, or shipping the Weaverse SDKs. Triggers on "release sdk", "release weaverse", "publish packages", "release core", "release schema", "bump sdk version", "ship sdks".
contributing
Codex adapter for the opencode-swarm contribution checklist. Use when preparing user-visible changes, release note fragments, local validation, branch hygiene, PR checklist items, or contribution-policy compliance before publishing work.
release-aur
Use when creating, updating, reviewing, or publishing Arch User Repository (AUR) packages. Runs /release-aur plan first, reviews PKGBUILD/.SRCINFO/build/namcap evidence, and only recommends /release-aur publish after a GO decision.
investigate-cloudflare
Investigate deployed Worker failures, regressions, and missing operational signals using Cloudflare Issues, logs, traces, SQL, or Observability MCP. Produce bounded evidence and verify recurrence against the deployed version.