scaffold-library

scaffold-library is a skill for Claude Code, Codex from porcupine-md/jonggrang. It costs 18 tokens per session (594 once invoked), scanned A, original, MIT.

A guide for setting up a TypeScript library with source folders, build settings, public exports, tests, linting, documentation, and optional continuous integration. A library is code packaged for use by other programs.

In plain words
What is it for?
Use it when starting a TypeScript library, including its package metadata, ESM and CommonJS outputs, type declarations, tests, and pull-request checks.
Why use it?
It provides the standard project structure and release settings needed to build, test, and publish a reusable package.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it when starting a TypeScript library, including its package metadata, ESM and CommonJS outputs, type declarations, tests, and pull-request checks.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/porcupine-md/jonggrang/scaffold-library
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add porcupine-md/jonggrang --skill scaffold-library
Clone the repo
git clone --depth 1 https://github.com/porcupine-md/jonggrang

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for scaffold-library

README.md
[![agentmods](https://agentmods.dev/badge/skills/porcupine-md/jonggrang/scaffold-library/github.svg)](https://agentmods.dev/skills/porcupine-md/jonggrang/scaffold-library)
Your own site
<a href="https://agentmods.dev/skills/porcupine-md/jonggrang/scaffold-library"><img src="https://agentmods.dev/badge/skills/porcupine-md/jonggrang/scaffold-library/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for scaffold-library

Your own site · 80×15
<a href="https://agentmods.dev/skills/porcupine-md/jonggrang/scaffold-library"><img src="https://agentmods.dev/badge/skills/porcupine-md/jonggrang/scaffold-library.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 18 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 594 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00018 $0.00594
Opus 5 $0.00009 $0.00297
Sonnet 5 $0.00004 $0.00119
Haiku 4.5 $0.00002 $0.00059

Measured 10d ago against content hash 3dff73dc1cb7, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

scaffold-library scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/core/scaffold-library/SKILL.md · 95 lines

What it actually says

Context

You will create a library "{{input.name}}" targeting {{input.runtime}}. Output format: {{input.format}}.

Instructions

  1. Setup package.json

    • name, version, description, license
    • main (CJS), module (ESM), types
    • exports field for dual package
    • scripts: build, test, lint, prepublishOnly
    • peerDependencies (not dependencies) for shared libs
  2. Setup TypeScript config

    • tsconfig.json for source
    • tsconfig.build.json for build output
    • Strict mode enabled
    • Declaration files enabled
  3. Setup build tool

    • tsup or unbuild (simple, near-zero-config)
    • Config for ESM + CJS output
    • Source maps
    • DTS generation
  4. Create source structure

    src/
    ├── index.ts          # Public API exports
    ├── types.ts           # Shared types
    └── [modules]/         # Feature modules
    
  5. Setup testing

    • Vitest config
    • Example test file
    • Coverage config
  6. Setup linting

    • ESLint config (if not already present)
    • Prettier config (if not already present)
  7. Create README stub

    • Installation
    • Quick start
    • API reference placeholder
  8. Setup CI (if jonggrang.json ci.provider != none)

    • Build + test on PR
    • Publish on tag/release

Script

#!/bin/bash
# Initialize if no package.json
if [ ! -f "package.json" ]; then
  npm init -y
fi

# Install dev dependencies
npm install -D typescript tsup vitest @types/node

Validation

  • npm run build succeeds
  • npm run test passes
  • Output files generated (dist/)
  • Types generated (.d.ts)
  • ESM import works
  • CJS require works (if format includes cjs)
  • Exports field correct in package.json
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 95 lines · 18 tokens per session scan A 3dff73dc1cb7

Subscribe to this mod's changes

scaffold-library is a skill published in the GitHub repository porcupine-md/jonggrang (11 stars, last pushed 2d ago), licensed MIT. It adds 18 tokens to every session and 594 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

no-bare-casts

Writing as in TypeScript or TSX production code, modifying a file that contains a bare as cast, silencing a type error with a cast, encountering as unknown as, or reviewing a cast site.

prisma/orm · 52 tokens

aws-sst-development

SST v4 (Ion) expert for managing AWS resources as code with the Pulumi-backed framework.

sickn33/agentic-awesome-skills · 26 tokens

league-akari-shard-development

Use when creating, extending, refactoring, splitting, or reviewing League Akari main or renderer shards, including shard file organization, controller/loader/executor/handler boundaries, naming conventions, renderer TSX usage, platform guards, and public contract compatibility.

LeagueAkari/LeagueAkari · 58 tokens

dd-code-generation

Use pup CLI for immediate Datadog operations or generate code for integration into applications.

DataDog/pup · 16 tokens

fast-typescript-check

Keep www-sacred's TypeScript fast to type-check and fast to run. Use when touching the ASCII/canvas animation components (the only real per-frame code here), tightening type-check wall-clock, or auditing a change for runtime or compiler regressions. Scoped to this repo — a React 19 / Next.js 16 component library plus…

internet-development/www-sacred · 84 tokens

migrate-better-result-3

Migrate a TypeScript codebase from better-result 2.x to 3.0. Use when upgrading better-result across the TaggedError syntax, removed Result serialization helpers, recovery inference, matching, or retry APIs.

dmmulroy/better-result · 52 tokens