plugin-scaffold

plugin-scaffold is a skill for Claude Code from matteotitta/genesys-skills. It costs 159 tokens per session (1,471 once invoked), scanned A, original, MIT.

A scaffolding tool that creates a Claude Code or Cowork plugin bundle from a short YAML description or an existing agent definition. A plugin bundle packages related skills together in a standard folder structure.

In plain words
What is it for?
Use it to start a new plugin bundle, package an agent with selected skills, or combine several skills into one bundle.
Why use it?
It removes the repetitive work of creating plugin files and keeps bundled skills linked to their canonical source files.

Skill for Claude Code

Written for Claude Code: effort in frontmatter. Also seen: reads .claude/ paths; mentions Claude Code.

Good fit Use it to start a new plugin bundle, package an agent with selected skills, or combine several skills into one bundle.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/matteotitta/genesys-skills/plugin-scaffold
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add matteotitta/genesys-skills --skill plugin-scaffold
Clone the repo
git clone --depth 1 https://github.com/matteotitta/genesys-skills

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for plugin-scaffold

README.md
[![agentmods](https://agentmods.dev/badge/skills/matteotitta/genesys-skills/plugin-scaffold/github.svg)](https://agentmods.dev/skills/matteotitta/genesys-skills/plugin-scaffold)
Your own site
<a href="https://agentmods.dev/skills/matteotitta/genesys-skills/plugin-scaffold"><img src="https://agentmods.dev/badge/skills/matteotitta/genesys-skills/plugin-scaffold/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for plugin-scaffold

Your own site · 80×15
<a href="https://agentmods.dev/skills/matteotitta/genesys-skills/plugin-scaffold"><img src="https://agentmods.dev/badge/skills/matteotitta/genesys-skills/plugin-scaffold.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 159 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,471 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Agent Snooping · line 10
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Agent Snooping · line 44
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00159 $0.01471
Opus 5 $0.00079 $0.00736
Sonnet 5 $0.00032 $0.00294
Haiku 4.5 $0.00016 $0.00147

Measured 9d ago against content hash 4171dd36c11b, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

plugin-scaffold scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/meta/infra/plugin-scaffold/SKILL.md · 137 lines

How it starts

The opening of the file, as written. The whole thing — 137 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/plugin-scaffold — Scaffold a plugin bundle

Generates a fresh plugin bundle under projects/apps/genesys-plugins/bundles/{bundle-name}/ following the canonical Claude Code plugin format. Symlinks skills from .claude/skills/ so the bundle stays in sync with canonical sources.


Claude Code triggers

Invoke when user says:

  • "scaffold a plugin for [agent/workflow]"
  • "create a new bundle"
  • "package [agent-name] as a plugin"
  • "bundle these skills together:..."
  • "new plugin bundle: [name]"

Do NOT invoke when:

  • User wants to edit a skill (canonical sources stay in .claude/skills/ — edit there)
  • User wants to publish a bundle to a public marketplace (that's a separate publish step)
  • User is asking about the Claude Code plugin format in general (answer from context, don't scaffold)

Inputs

The skill accepts a bundle spec in one of two forms:

Form 1 — Inline spec

bundle: linkedin-engine
description: "Personal LinkedIn content engine. Voice memo or thought → drafted post on brand in 60s."
agent: social-marketer # defaults to bundle name if omitted
author: genesys-growth
version: "0.1.0"
skills:
  - content-skills/linkedin-skills/linkedin-hooks
  - content-skills/linkedin-skills/linkedin-expert-posts
  - content-skills/linkedin-skills/linkedin-personal-posts
  # … add more paths relative to.claude/skills/
commands:
  - name: draft-from-thought
    description: "Turn a raw thought into a voice-checked LinkedIn post."
  - name: weekly-batch
    description: "Run the weekly content batch."
cowork_ready: true # false if any skill or MCP is local-only
resale_candidate: true # leave true so a future voice-scrub fork stays on the table

Form 2 — From an existing agent

If the user says "package the social-marketer agent as a plugin", read .claude/agents/{agent-name}.md. The frontmatter already has a skills: list — use it. Prompt the user for bundle name + description only.


Process

  1. Validate inputs — bundle name kebab-case, all listed skill paths exist under .claude/skills/, target folder doesn't already exist (else ask to overwrite).
  2. Create folder structure:
    projects/apps/genesys-plugins/bundles/{bundle}/
    ├──.claude-plugin/plugin.json
    ├── settings.json
    ├── README.md
    ├── agents/{agent}.md (copy + adapt from.claude/agents/{agent}.md)
    ├── commands/{each}.md
    ├── skills/ (symlinks to.claude/skills/...)
    └── examples/ (empty placeholder + README)
    
  3. Render plugin.json from the premium reference using the spec.
  4. Render settings.json with "agent": "{agent}" as the default.
  5. Copy + adapt the agent definition from .claude/agents/{agent}.md. Keep the body. Strip the skills: frontmatter (Cowork doesn't read it the same way). Add a short "Bundle context" section referencing the plugin name.
  6. Create symlinks for each skill: ln -s {absolute-path-to-.claude-skill} skills/{skill-name}. Use absolute paths so symlinks survive bundle moves.
  7. Stub each command under commands/ with a frontmatter + description. Leave the body as a TODO marker for the user to fill with the opinionated chain.
  8. Render README.md from the premium reference with the bundle name, description, skill list, and install command.
  9. Update the top-level projects/apps/genesys-plugins/marketplace.json to include the new bundle.
  10. Report the created paths and a 1-line install command the user can run to test the bundle locally.

Read the full file on GitHub · 137 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 137 lines · 159 tokens per session scan A 4171dd36c11b

Subscribe to this mod's changes

plugin-scaffold is a skill published in the GitHub repository matteotitta/genesys-skills (36 stars, last pushed 1mo ago), licensed MIT. It adds 159 tokens to every session and 1,471 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

gingiris-b2b-growth

🇺🇸 B2B SaaS Growth — PLG vs SLG Playbook — Diagnose whether your problem is distribution, pricing, or PMF. PLG/SLG selection by ACV and sales cycle, the 5-stage path from $0 to $10M ARR, NRR discipline, affiliate & channel motion, enterprise tiering. Built from HeyGen, Deel, Vercel, Supabase, Snowflake patterns.…

Gingiris-1031/gingiris-skills · 484 tokens

go-to-market-playbook

A reusable Go-to-Market strategy template for both B2B and B2C launches. Covers positioning, messaging, ICP definition, channel selection, and competitive analysis frameworks. By @WeiYipei.

Gingiris-1031/gingiris-skills · 48 tokens

gr-b2b-growth

A guide to growing a business-to-business software product from early user research to large-scale sales. B2B software is sold to companies rather than individual consumers.

Gingiris-1031/gingiris-skills · 83 tokens

gingiris-go-global

🇺🇸 AI Product / SaaS Go-Global Complete SOP — From competitor research to launch to monetization. A full-cycle playbook covering Phase 0-5 (market validation, positioning, first 100 users, user interviews, beta-to-growth) plus open-source launch, Product Hunt, Reddit, SEO/GEO, conversion, and org principles.…

Gingiris-1031/gingiris-skills · 534 tokens

gr-competitor-research

Your competitor just launched. You have no idea how they grew so fast. Should you reverse-engineer their website? Track their social media? Map their growth flywheel? This gives you the complete SOP — from Wayback Machine snapshots to X/Twitter propagation analysis to growth flywheel scoring. Built from 150+ AI…

Gingiris-1031/gingiris-skills · 582 tokens

ai-launch-playbook

Launch your AI product to global attention — the playbook behind Manus, Devin, and AFFiNE's breakout launches. Covers AI-specific GTM strategy, hype cycle management, waitlist tactics, and multi-market rollout for maximum day-one impact.

Gingiris-1031/gingiris-skills · 54 tokens