10x-bootstrapper

Scaffold a project from a tech-stack hand-off file using the chosen starter's CLI with conflict-safe merging.

Updated Jul 4, 2026
One-click install
npx skills add https://github.com/Assamir/ai-toolkit --skill 10x-bootstrapper-assamir
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 10x-bootstrapper
Source: https://github.com/Assamir/ai-toolkit/tree/main/.cursor/skills/10x-bootstrapper
Command: npx skills add https://github.com/Assamir/ai-toolkit --skill 10x-bootstrapper-assamir

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Turning a chosen tech stack into an actual scaffolded codebase is error-prone: starter CLIs can clobber existing files, starters go stale, and fresh dependency trees ship with unknown vulnerabilities. This Skill automates the scaffold step with a strict conflict policy and a written verification trail. ## Core Features & Use Cases - Hand-off-driven scaffolding: Reads context/foundation/tech-stack.md written by the tech-stack selector, resolves the starter by starter_id against the starter registry, and runs its CLI with the correct cwd strategy (temp-dir move-up, native cwd, or git clone). - Strict conflict policy: Existing files are never overwritten — context/ is always preserved, .gitignore is append-merged, and clashes become .scaffold sibling files for manual diffing. - Pre- and post-scaffold verification: Checks starter recency via npm and GitHub before scaffolding, then runs the ecosystem's audit tool (npm audit, pip-audit, cargo audit, govulncheck, etc.) and writes a full verification log to context/changes/bootstrap-verification/verification.md. - Use Case: After running the tech-stack selector for a Next.js project, invoke this Skill to scaffold the app into the current directory, get warned if the starter is stale, see a severity-tiered audit of the fresh dependency tree, and receive a complete audit-trail log. ## Quick Start Bootstrap the project using the tech-stack hand-off at context/foundation/tech-stack.md and scaffold the app into the current directory.

Frequently Asked Questions about 10x-bootstrapper

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scaffold a new project from a chosen tech stack?

Run the tech-stack selector first to write context/foundation/tech-stack.md, then invoke the bootstrapper. It reads the hand-off, resolves the starter's CLI template, scaffolds into the current directory, and writes a verification log of the entire run.

What happens to my existing files when scaffolding into a populated directory?

Existing files are never overwritten. The conflict policy preserves context/ entirely, append-merges .gitignore, and sidelined conflicting scaffold files as .scaffold siblings so you can diff and merge manually. A populated-directory warning asks for confirmation first.

Does the bootstrapper check for dependency vulnerabilities after scaffolding?

Yes. After scaffolding it dispatches the ecosystem's audit tool — npm audit, pip-audit, cargo audit, bundle audit, govulncheck, or dotnet list package --vulnerable — and tiers findings into CRITICAL, HIGH, MODERATE, and LOW. Findings are informational and never block the run.

Why does the bootstrapper refuse to run without a tech-stack hand-off file?

The hand-off file on disk is the strict contract; the skill never falls back to conversation history or an inline stack pick. If context/foundation/tech-stack.md is missing, it prints a redirect to the tech-stack selector and stops.

What happens when the starter CLI fails during scaffolding?

A non-zero exit code is a hard stop: the temporary .bootstrap-scaffold directory is left in place for inspection, no merge is applied, and a partial verification log with phase_3_status failed is written so you can retry after fixing the cause.

Does the bootstrapper generate AGENTS.md, CLAUDE.md, or CI workflows?

No. Version 1 deliberately does not generate agent context files, CI workflow files, or git history. Those responsibilities are deferred to a future skill; the bootstrapper only scaffolds, verifies, and logs.