AI Catalyst C3·Core Sessions - Week 7·3:09:10

Session 14: Claude Code — Advanced Workflows

Harshit Trainer — builds a full skills marketplace live in Claude Code (plan mode, sub agents, GitHub + Vercel CLIs), then cuts a product explainer video with the HyperFrames skill; teaches from a MacBook M3 Pro on the terminal, not the app · Niharika Cohort manager (opens the session, launches the closing CSAT poll)

▶local recording · LMS lesson

Session map

Extend Claude CodeBuild & shipCreate media

click a node — its card pops up (drag it anywhere, × to close)

Concept

The map reads left to right — extend claude code flow into build & ship, then into create media. Click any node to open that idea here; every timestamp jumps into the recording.

The short version

The session's spine: Claude Code stops being a coding tool and becomes the one terminal that drives everything else — 'Claude Code is now becoming like this one-stop tool which connects to the rest of the tools.'
The mental model taught first: three ways to extend it — a CLI installs into the command line and authenticates in one command; an MCP server is a provider-hosted API wrapper needing keys and config; a skill is just a .md file acting as a system prompt.
The build: an enterprise-grade 'vetted skills marketplace' (a safer skills.sh) planned in plan mode on Opus 4.8 extra-high, executed with sub agents, pushed to GitHub by CLI, deployed live with the Vercel CLI, and open-sourced under MIT for the cohort.
The warning threaded through it: skills are a prompt-injection vector — the ClawdHub/OpenClaw incident is retold, and the Cloudflare security-audit skill is prescribed before installing anything third-party.
The finale: a 30-second product explainer generated by the HyperFrames skill from the site's own design system, voiced for free by macOS TTS and scored with Suno — 'you don't even need ElevenLabs at this point.'

The concepts

Three ways to run Claude Code: app, terminal, inside an IDE

0:11:24

Same brain, three bodies — and the one that looks geekiest is the one professionals actually use.

Claude Code exists as the desktop app (subscription-billed, tied to your login), the original terminal CLI (usage-billed against your own API key from platform.claude.com), and as an extension inside any IDE with a terminal — VS Code, Cursor, or Google's Antigravity. Functionally they are the same thing; the differences are billing, weight, and update order.

The trainer's ordering: updates land in the terminal first, then the app; the terminal is lightest on the machine, which matters once you run several instances at once. The IDE route is just the CLI hosted inside the editor's own terminal panel — it uses your API key, not the IDE's assistant.

Worked example · from the session

He opens all three live: the app on his Pro plan, a blank terminal where typing 'claude' brings up the folder-trust prompt, and Antigravity with the Claude Code extension opening a CLI session inside the IDE.

Why it matters

Choosing the interface is choosing your billing model and your ceiling — the terminal's usage pricing and lightness is what makes the later multi-instance, sub-agent work affordable.

People get this wrong

The IDE integration is the IDE's own AI.

It is the same Claude Code CLI running in the IDE's terminal on your API key — the IDE contributes only the window.

Claude Code is now becoming like this one-stop tool which connects to the rest of the tools, and then you just use that.0:09:22

For your projects

['You already run Claude Code in Cowork; the transferable point is the billing split — your Fable/Opus credit management mirrors his subscription-vs-API tradeoff.']

Go deeper

In one line: Claude Code runs as a subscription desktop app, an API-key terminal CLI, or the same CLI hosted inside an IDE; capabilities match, but billing, resource weight, and update timing differ, with the terminal first in line.

App = subscription and account login; terminal = usage-based against your API key from platform.claude.com (0:13:25)

Terminal is 'very light on your computer' — the practical basis for firing up multiple agents (0:13:25)

Updates come to the terminal first, then the app (0:15:26)

IDE route: install the extension, and Claude Code opens inside the IDE's terminal — 'it has nothing to do with Antigravity's chat' (0:15:26)

Try it now

Open your terminal, type claude, and read the folder-trust prompt carefully before accepting — note exactly which folder you are granting.

▶ Watch this taught: 0:11:24

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

Which of the three interfaces bills against your API key, and which against a subscription?

The terminal CLI (and its IDE-hosted twin) bill against your API key from platform.claude.com; the desktop app runs on your subscription and login.

CLI vs MCP vs skill — the three ways to extend Claude Code

0:29:41

Three words get thrown around interchangeably — CLI, MCP, skill — and they are three completely different machines.

A CLI is a program that installs directly into your command line with one command and authenticates itself against your own account — after that it lives locally, no middleman. An MCP server is an API wrapper exposed by a provider: you usually need an API key, sometimes a JSON config change, and the provider's server stays in the loop deciding what tools you get. A skill is neither — it is a plain .md markdown file that acts as a system prompt, adding context and fixed procedure to Claude.

The trainer's shorthand for skills: an IFTTT workflow — 'if this then that' — a clear prompt telling the model not to divert or overthink but to execute the known procedure exactly. Repeatable, reusable, and installable with a single command.

Worked example · from the session

The whiteboard triptych: GitHub CLI (one command, authenticates with your account) vs the Gmail/VAPI MCP servers (API keys, provider-exposed tool calls) vs a newsletter-drafting skill he uses himself (one .md file).

Why it matters

Every advanced workflow in the session — and the marketplace being built — depends on picking the right one of these three; the wrong pick costs tokens, security, or capability.

People get this wrong

A skill is software.

It is text — 'a big long markdown file which just adds additional context to Claude' — which is also why it can carry a prompt-injection payload (see skill-injection).

One command, one server, one markdown file — what each extension mechanism really is

A skill file is nothing but a very simple .md file which acts as a system prompt that Claude uses.0:33:44

For your projects

['Your course-site pipeline conventions (README rules, checklist engine) are skills in his sense — .md procedure files; packaging them as literal Claude Code skills is a short step.']

A 'skills, not staff' framing for the KB: every repetitive site chore captured as a one-file skill.

This idea elsewherereappears inskills as one of six harness parts — this is the ground-level definition builds onMCP installs, session 9's version

Go deeper

In one line: CLI: locally installed command-line program authenticated to your own account. MCP server: provider-hosted API wrapper granting defined tool calls, usually via API key and config. Skill: a .md file acting as a system prompt encoding a repeatable procedure.

'A CLI is a simple command you install in your Claude Code and simply authenticate' — no server of its own (0:31:43)

'An MCP server is an API wrapper which is exposed by the provider' — keys, config-file edits, and the provider decides the tool surface (0:31:43)

'A skill file is nothing but a very simple .md file which acts as a system prompt that Claude uses' (0:33:44)

Skill-as-IFTTT: deterministic, 'tells your LLM not to divert, not to think too much, but to exactly use the skill as is' (0:39:52)

Try it now

Name one repetitive thing you do weekly and sketch it as a skill: a single .md file with the exact steps. That is the entire format.

▶ Watch this taught: 0:29:41

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

Which of the three needs no API key and no server at all?

The skill — one .md file of instructions. The CLI installs locally but authenticates to your account; the MCP needs the provider's server and usually a key.

When to use which: CLI for enterprise, MCP for end users, skills for repetition

0:35:48

The same job — reading email, running a voice agent — is a CLI problem for an enterprise and an MCP problem for you.

The dividing line is who depends on whom. A CLI gives your agent control of a platform's whole dashboard without depending on what a third-party MCP chooses to expose — which is why enterprises and B2B deployments standardize on CLIs (his example: GWS CLI driving an entire Google Workspace, or deploying ten VAPI voice agents for clients). An MCP fits the end user building for themselves: the provider's server hands your LLM a bounded set of tool calls in exchange for an API key.

Skills sit orthogonally: they encode anything repetitive you have already worked out once — newsletter drafting, video assembly — and he predicts a real market for them, up to agents buying skills for themselves from marketplaces.

Worked example · from the session

VAPI both ways: build your own voice agent → use the VAPI MCP server; deploy ten voice agents for enterprise clients → drive the VAPI CLI (or have a Hermes agent do it).

Why it matters

This is the session's decision rule, and it reframes MCPs from default to special case — 'MCPs are just exposed by the company… it's basically just tool calls. But with CLI, you can control the whole dashboard.'

People get this wrong

MCP is the modern replacement for everything else.

In this taxonomy it is the narrowest option — bounded tool calls a company chooses to expose. CLIs control the whole dashboard; skills encode your own procedure.

MCPs are just exposed by the company… it's basically just tool calls. But with CLI, you can control the whole dashboard.0:41:53

Whatever your specialized knowledge is, you can condense it and you can wrap it up as a skill.0:41:53

For your projects

["Your registries/build scripts are the 'CLI side' of this split — first-party, full-control; resist adding MCP layers where a script already owns the surface."]

Go deeper

In one line: Choose a CLI when you need full-surface, first-party control (enterprise/B2B, multi-client); an MCP when a provider's bounded tool calls are enough (personal/end-user builds); a skill whenever the task is repetitive and already solved once.

CLIs authenticate agents that are themselves CLI-powered — Hermes, OpenClaw (0:35:48)

GWS CLI called 'the most used CLI' — whole Google Workspace, email stack included, production-grade (0:35:48)

Enterprises avoid depending 'on a 3rd-party provider for what the MCP is gonna give them access to' (0:35:48)

Skills: 'teaching your LLM something that is repetitive'; his prediction — a marketplace where agents buy skills for themselves (0:39:52, 1:21:26)

Try it now

For one tool you use through an MCP today, check whether it ships a CLI — if it does, ask which of the two gives you more of the dashboard.

▶ Watch this taught: 0:35:48

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

Why would an enterprise prefer a CLI even when a polished MCP exists?

Control and independence: the CLI drives the whole dashboard first-party, without depending on the tool subset a third-party MCP chooses to expose.

GitHub CLI: your whole repo history, conversationally

how-to0:19:29

Every git command you ever feared — push, pull, rebase, commit — collapses into one sentence: 'install GitHub CLI and give me the login link.'

GitHub is where code lives; the old cost of using it was memorizing git's command zoo. With the GitHub CLI installed inside Claude Code, the model knows all the commands, so you operate GitHub conversationally. The install itself is a prompt; authentication is a device-login link plus a code; from then on 'can you look into my latest repository?' fetches, inspects, and reports.

Worked example · from the session

Live: install prompt → device link → code pasted → authorized with a passkey → 'look into my harshad.com website and tell me what the latest push was' → Claude answers 'reorder social links and newsletter,' verified on github.com as the commit from five hours earlier.

Do it in this order

01Prompt Claude Code: install GitHub CLI and hand back the login link directly
02Open the link (github.com/login/device), pick your account, type the one-time code shown in the terminal
03Authorize (passkey works) — Claude Code is now bound to your GitHub
04Work in plain language: 'look into my latest repo', 'what was the latest push on my website?'

Gotchas['The trust grant is broad — his terminal session had access to his whole home folder before GitHub was even involved', 'Multiple GitHub accounts can be connected — asked and confirmed live']

Why it matters

This is the first working proof of the session's thesis — a CLI turns a whole platform into a conversation, no dashboard, no memorized commands.

People get this wrong

You must learn git commands before you can use GitHub seriously.

The session's order is the reverse: get the account, install the CLI, and let the model own the command layer — 'now you do not have to remember any of these.'

For your projects

["Your site pushes are manual commits by rule (this chat never pushes); his flow is the shape of the manifest checklists' phase H — worth keeping human, as designed."]

This idea elsewherebuilds onthe vocabulary this conversational layer hides builds onthe commands Claude is running for you

Go deeper

In one line: The GitHub CLI, installed and authenticated inside Claude Code via a device-login flow, lets you query and control repositories in natural language — Claude translates to git/gh commands it already knows.

'Previously they had to remember these commands… git push or git pull or git rebase… now you do not have to remember any of these' (0:19:29)

Device flow: link → account → one-time code → authorize (0:25:34)

Verification habit modeled live: Claude's answer about the latest commit is checked against the real GitHub page (0:27:37)

Sarah (no GitHub account) told to create one — 'this is where we push our code'; account first, CLI later (0:17:28)

Try it now

In Claude Code, type: 'Install GitHub CLI and give me the login link directly so I can open it and type in the code.' Then ask it for your latest commit.

▶ Watch this taught: 0:19:29

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

After authentication, where do your prompts about 'my latest repo' actually run — GitHub's servers or your terminal?

Claude translates them into gh/git commands in your terminal, which call GitHub's API on your authenticated account — the model owns the command layer, GitHub still owns the data.

shadcn/ui and the wrapper tower: Next.js → components → aggregator → CLI → skill

0:58:09

The polished UI kits people pay for are wrappers of a wrapper of a free thing — and your agent can install the free thing in one command.

Next.js (Vercel's framework) is the base LEGO block of modern web front ends. Builders made components on it — buttons, accordions, inputs, dashboards. A Vercel engineer working under the pen name shadcn aggregated the best of them into shadcn/ui: open source, repeatable, clean. Then came a shadcn CLI to install components by command, and, for people who found the CLI hard, a shadcn skill that teaches the model the CLI.

Everything above it — 21st.dev ('now a YC-backed startup'), Magic UI — is a wrapper of shadcn/ui resold upward. Knowing the tower means you take the layer you need for free.

Worked example · from the session

Live tour of ui.shadcn.com — alert dialogs, aspect ratios, avatars, button groups — plus theming ('zinc, mist, stone… you can build your own design language'); the marketplace build uses the shadcn skill from skills.sh (230,000+ installs).

Why it matters

Hand-vibing this UI makes the AI hallucinate and burn time; using the component layer directly is why the marketplace's front end comes out clean — 'these buttons are very, very clean… that's the reason I prefer using the skill instead of just using Lovable.'

People get this wrong

The pretty component libraries are proprietary tech worth paying for.

The value chain runs on one open-source aggregator; the paid layers (21st.dev, Magic UI) are convenience and curation over the same free components.

The tower the session climbs: framework at the base, skill at the top, each layer wrapping the last

For your projects

['Your course site is hand-rolled static HTML by design; the transferable piece is the pattern — aggregate once, wrap as a skill — which is exactly your checklist-engine approach.']

A 'wrapper tower' diagram is reusable for explaining almost any AI-tool ecosystem in the KB.

Go deeper

In one line: shadcn/ui is an open-source aggregator of Next.js components, installable via its CLI and drivable via a skill; commercial kits like 21st.dev and Magic UI are wrappers over it. Skill + CLI together give an agent token-cheap command of the whole layer.

Foundation upward: Next.js → community components → shadcn/ui aggregator → shadcn CLI → shadcn skill (0:58:09–1:02:12)

'shadcn' is a pen name; he works at Vercel (1:00:10)

21st.dev and Magic UI are shadcn wrappers; people pay for them anyway — 'Lovable exists, but people pay for websites. It's just that.' (1:04:15, 1:13:18)

Skill + CLI beats CLI alone on tokens: 'now our LLM is equipped with what commands to use, when to use' (1:15:20)

Try it now

Open ui.shadcn.com, pick one component you'd want on your own site, and note it is copy-paste free — the paid versions of it live one wrapper up.

▶ Watch this taught: 0:58:09

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

What does the shadcn skill add that the shadcn CLI alone doesn't?

Command knowledge — the skill teaches the model which CLI commands to use and when, so it stops burning tokens rediscovering them.

Context7 reconsidered: when the model outgrows the docs-fetching MCP

0:56:05

Yesterday's essential MCP is today's token tax.

Context7 — the documentation-lookup MCP with access to thousands of libraries — mattered when models didn't know new frameworks. It is 'just a grep tool': it fetches doc pages and hands them back. The trainer's position: current models (he names Opus 4.6, GPT 5.5/5.6 as heard) scrape and reason over documentation themselves, so keeping Context7 in the loop mostly burns tokens. The carve-out: genuinely deep or obscure documentation the model truly doesn't know — enable it then, on demand.

Worked example · from the session

shadcn/ui itself is the case study: seven-odd months ago LLMs needed Context7 to learn it; now a CLI and a skill exist, 'so you can just bypass the MCP.'

Why it matters

It models the meta-skill of re-auditing your stack as models improve — subtractions save money the way additions never do.

People get this wrong

Tool advice from earlier sessions is stable.

The cohort learned Context7 the previous day; this session retires it — the curriculum is deliberately showing its own churn.

For your projects

['Mirrors your own OI-004 economics: verification-by-better-model beat an extra retrieval layer. Same lesson, their stack.']

This idea elsewherereappears inthe same token economics, loop-side

Go deeper

In one line: Context7 is a documentation-retrieval MCP whose default use is now discouraged: modern models fetch and digest docs unaided, so it earns its tokens only for deep/obscure documentation on explicit demand.

'It's just a grep tool… models have just gotten so good that they don't even need that' (0:56:05)

Adding the Context7 skill also 'just burns extra tokens' in his experience (0:58:09)

Exception: 'some kind of deep tech where you need those documentation — then enable Context7 and ask it to bring it' (0:58:09)

Restated at the deploy step: 'at this point we don't honestly need an MCP at all… it can just do it with CLI and skills directly' (2:07:58)

Try it now

List the MCPs you have enabled and ask of each: would the model now handle this natively? Disable one for a week and watch the difference.

▶ Watch this taught: 0:56:05

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

What is the one situation where he still reaches for Context7?

Deep or obscure documentation the model genuinely doesn't know — enable it on demand for that job, then drop it again.

Planning like a pro: plan mode, effort levels, and the slash-command cockpit

how-to0:47:58

The build's quality was decided before a single file existed — in the model picker, the effort menu, and one restraint-laden context prompt.

The workflow separates thinking from doing. Planning gets the most expensive settings — strongest model, extra-high effort — because 'it's always better to use the best model to plan for us, then switch to 4.6 to just execute.' The slash commands are the cockpit: /model, /effort (six modes), /plan, /permissions (bypass), /usage (live cost), /btw (a side-chat that doesn't interrupt the main run), and /goal (see subagents-and-goal).

Two prompt disciplines carry it: first a context-only prompt that explicitly forbids work ('just understand what my goal is'), then a product prompt into plan mode with the raw materials pasted alongside — docs page, skill command — so the plan is grounded in the actual tool surface.

Worked example · from the session

The marketplace plan lands with a folder structure, slug scheme, research grounding ('the incumbent skills.sh is free… no payments, no per-buyer access control, no real vetting'), and phases 0–4; he shares the plan file with the cohort as a reusable artifact.

Do it in this order

01Create an empty project folder on the desktop (skills-marketplace) and drag it into a fresh Claude Code window (Cmd+N; type claude)
02/model → pick the strongest planner (Opus 4.8, 'long sessions'); /effort → extra high; switch on 'Ultracode' (as heard) for planning
03Give a context-only prompt: state the goal, say 'do not do anything extra — I want to get into plan mode next'
04/plan → paste the raw materials: the full shadcn CLI docs page, the shadcn skill install command, and the product prompt
05Review the written plan (folder structure, slugs, phases 0–4); answer its scoping questions (version 1, no Stripe yet)
06Approve with bypass permissions ('I don't wanna come back and keep saying yes'), optionally drop to a faster model for execution

Gotchas["Space doesn't work in the terminal input; separate sections with slashes instead", "Escape kills the running turn — 'don't click escape too many times'; navigate agents with arrow keys", 'Prompts queue while the agent works; a queued prompt needs escape-then-enter to fire']

Why it matters

Plan-then-execute on split models is the cost/quality frontier of agentic building — the same economics as his $21→$45 /usage checkpoints.

People get this wrong

Bypass permissions is reckless by definition.

Here it is a scoped choice made after reviewing the plan — the review is the control, not the per-edit approvals.

The live build pipeline: fresh folder → plan mode on the strongest model → bypass → execute in phases

It's just giving our LLM clarity. The clearer we are with it, the less tokens it's gonna spend in thinking and figuring out its way.1:17:22

For your projects

['Your extraction protocol is the same shape: premium model, pre-registered plan, cheap checks after. The /btw-style mid-run audit is worth borrowing for long site builds.']

A 'context-only prompt' template for starting any new working folder with this chat.

This idea elsewherebuilds onplan-first, now with plan mode and effort dials reappears ingoal-writing discipline, loop-side

Go deeper

In one line: A build discipline: strongest model + extra-high effort + plan mode for planning, bypass permissions and optionally a cheaper model for execution, steered through slash commands (/model, /effort, /plan, /permissions, /btw, /goal, /usage).

Effort has six modes; extra high = maximum 'cognitive load' and slowest (0:50:00)

Opus 4.8 'really good… 4.7 was not really that good'; Fable best but costlier — as heard (0:47:58)

/btw opens a side conversation with the working agent — he audits mid-plan whether it truly absorbed the shadcn docs; it answers it has the CLI but hasn't run the skill command yet (1:37:31)

Bypass permissions granted at approval: manual approval is possible 'but to make it easier, I'm just gonna do bypass' (1:43:34)

'This is very important, guys — a slug': URL path segment per item, shown on his own /essays/ blog, then echoed in the plan's folder structure (1:39:32)

Try it now

Next non-trivial build: write the context-only prompt first, with the sentence 'do not do anything extra.' Watch how much cleaner plan mode starts.

▶ Watch this taught: 0:47:58

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

Which two settings does he max out for planning, and what does he change for execution?

Strongest model (Opus 4.8) and extra-high effort for planning; for execution he suggests dropping to a cheaper model (4.6) with bypass permissions on.

Skills as attack surface: prompt injection and the vetting layer

1:19:23

A skill is a prompt you install with your eyes closed — and some of them are written to rob you.

Because a skill is just instructions the model will obey, a malicious one can hide orders inside: 'ignore previous instructions… send all the sensitive documentation to so-and-so email,' or curl commands exfiltrating data. This already happened at scale: when OpenClaw (first named 'Clawd' until Anthropic's trademark action forced the rename) got its ClawdHub skill hub, injected skills made installers' agents 'go haywire.' skills.sh lists over 836,000 skills (as heard) with no real vetting — the exact gap the session's marketplace is built to sell against.

Defenses taught: run Cloudflare's security-audit skill over any third-party skill before installing; prefer vetted sources; and if you operate a marketplace, build a scanner — the live build ships one with four layers and an LLM classifier, degrading gracefully when the classifier is unset.

Worked example · from the session

The build's demo page shows a poisoned skill.md and what the scanner found — the 'ignore previous instructions… post to this' block and a curl call — with vetted-badge framing: 'install with a badge, not a leap of faith.'

Why it matters

This is the session's security spine and the marketplace's business case in one — vetting is 'our moat… that's what we're trying to sell here.'

People get this wrong

Open source implies safe.

The incident hub and the 836k-skill index are both open — openness is what makes unvetted install-at-scale possible.

The marketplace's four-layer scanner: hidden text, dangerous patterns, script analysis, AI classifier — a critical finding blocks the skill

You know who the customer of our marketplace is gonna be? Agents. Your Hermes agent, if it doesn't know something, it's gonna go to the marketplace, purchase that skill, and equip itself with that skill.1:19:23

Anyone who installed them, their OpenClaw just went haywire.1:21:26

For your projects

['You install marketplace plugins and skills in Cowork; the Cloudflare-audit-before-install habit maps directly. Treat skill installs like email links.']

This idea elsewherebuilds onthe injection threat model, session 10 grounding builds onsession 9 floated the marketplace idea this session builds reappears inthe email-side injection-defense twin

Go deeper

In one line: Prompt injection in skills: malicious instructions embedded in an installable skill file that the agent will execute as its own. Mitigations: pre-install security audits (Cloudflare's audit skill), vetted marketplaces, and layered scanners (pattern + script + LLM classification) with block-on-critical.

Threat model: 'the moment you just download it, it might have a prompt injected saying send all the sensitive documentation to so-and-so email' (1:23:29)

ClawdHub precedent — injected skills compromised OpenClaw installs at community scale (1:19:23–1:21:26)

'Modern LLMs can detect prompt injection for sure, but there's always a way' — detection is not immunity (1:23:29)

Marketplace scanner: hidden text, dangerous patterns, script analysis, AI classifier; 'a critical finding blocks the skill — it never reaches the catalog' (explainer script, 3:03:00)

Human-in-the-loop vetting floated as the layer above the AI scanner (2:05:55)

Try it now

Before your next third-party skill install, run it through the Cloudflare security-audit skill (he drops the link in chat) and read what a scanner looks for.

▶ Watch this taught: 1:19:23

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

Why can't 'the model will notice' be your whole defense against an injected skill?

Because 'there's always a way' — detection is probabilistic. Layered scanning, pre-install audits, and vetted sources are the defense; the model is only one layer.

Sub agents and /goal: parallel work without interrupting the build

1:45:36

The main agent never stopped building — the docs, the GitHub repo, and the deploy all happened beside it.

The pattern: when a side task appears (write the plan to a .md, create and push an open-source repo, deploy to Vercel), you tell the main agent to spawn a sub agent for it — 'without interrupting any of your tasks.' A plain prompt is enough; if you don't specify, the main agent absorbs the work itself and stalls the build. Sub agents show up as separate chats navigated by arrow keys; Claude even spawns its own during planning (research agents, an injection-vetting agent, a design agent).

/goal is the persistence half: 'please continue with the entire build process… do not stop building' locks the agent on the phase list until everything is done, surviving his Zoom crash and repeated stops. The unprompted bonus he flags: the sub agent instruction Claude wrote for itself included 'it must verify no secret keys are committed.'

Worked example · from the session

Three parallel tracks live: main agent scaffolding phases 0–4; a docs/open-source sub agent creating skills-marketplace-outskill (MIT, learner-focused README); a deploy sub agent authenticating Vercel, failing once on changed files, relaunching, and shipping the link.

Why it matters

This is the working shape of the orchestration Sukhin formalizes in session 15 — one coordinator, disposable workers, done defined by the goal, not the turn.

People get this wrong

Parallelism needs special commands.

It is requested in plain language; the special commands (/goal, arrows) exist for persistence and navigation, not spawning.

For your projects

["This chat's Agent tool is the same primitive; the 'no secret keys committed' self-instruction is a guard worth adding to any repo-touching task prompt."]

This idea elsewherereappears inthis ad-hoc pattern, promoted to files and loops builds onsub-agents, session 10 primer

Go deeper

In one line: Sub agents are parallel Claude Code workers spawned by prompt from the main agent for side tasks; /goal pins the main agent to a stated objective until completion. Together they let one session build, document, publish, and deploy concurrently.

During planning, Claude spawned its own sub agents — research on skills.sh format, prompt-injection vetting, and a design agent (1:19:23, 1:39:32)

Deploy failure handled autonomously: 'the failed Vercel build ran on uploaded snapshots since files changed' → relaunch → live (2:18:08)

Best practice, asked directly: 'try to be as clear as possible… but now the LLMs are able to understand it even without deep clarity' (1:47:39)

Interrupting is a real hazard — a stray click stopped the docs agent; 'please continue' recovered it (1:49:41)

'Stop your main agent if you're doing some kind of a deployment' — file churn during deploys causes snapshot mismatches (2:18:08)

Try it now

Next time you want a side artifact mid-build, phrase it exactly as: 'Without interrupting any of your tasks, spawn a sub agent to…' and watch the main run continue.

▶ Watch this taught: 1:45:36

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

What happens to a side task if you don't say 'spawn a sub agent' — and why does that matter mid-build?

The main agent absorbs it and stalls the build — the phrase 'without interrupting any of your tasks' is what buys the parallelism.

Ship it from the terminal: GitHub push, Vercel CLI deploy, and the auto-push workflow

how-to2:07:58

No GitHub dashboard, no Vercel dashboard — the site went from empty folder to public URL entirely through prompts.

The shipping half of the session strings the CLIs together: GitHub CLI holds the repo relationship, Vercel CLI turns the repo into a live site, and a requested workflow keeps future pushes automatic. Raw docs pages pasted into context stand in for tool knowledge, and the deploy is delegated to a sub agent so building never pauses. The trainer's framing for the cohort: everything is open-sourced (MIT) precisely so learners fork it and build their own marketplaces on top.

Worked example · from the session

Four commits land during the session (initial, DB URL, front-end v1, fixes); localhost:3001 shows the landing page mid-build; the final Vercel link is dropped in chat with 'fork it, star it.'

Do it in this order

01Have the sub agent create the repo (skills-marketplace-outskill), MIT license, learner-focused README, and push — verify the commit list on github.com
02Paste the Vercel CLI docs page into the chat as raw context, then prompt: connect the pushed repo to Vercel, take it live, return the public link
03Spawn it as a sub agent so the main build continues; expect one failed build if files are still changing — relaunch
04Ask for a standing workflow: 'once the entire code base is done, push the entire code to my GitHub' — set-and-forget
05Check /usage at each milestone ($21 → $34 → $45 across the session)

Gotchas["RBAC belongs in the build prompt from the start: marketplaces need admin / seller / buyer roles — 'give it in the prompt itself… it's gonna help you build the foundation very clearly'", "Docker/Postgres couldn't run on the demo laptop — the local DB was deferred and the front end prioritized for the audience", "Claude added itself as a repo contributor 'in a very sneaky' way — removable, but check"]

Why it matters

It completes the CLI thesis end-to-end: platform dashboards were never opened, yet code review, licensing, README, deploy, and CI-ish workflow all happened.

People get this wrong

Deploys need the provider's web dashboard.

The dashboard is one interface to the same surface the CLI already covers — the whole ship loop ran without opening GitHub's or Vercel's web UI.

I haven't even used the Vercel console, the dashboard. I've just done it using CLI itself, just with prompts.2:20:10

For your projects

["Your site's GitHub pushes stay manual by rule — but his 'workflow' request is the exact template if you ever want push-on-build for a non-KB project."]

A one-page 'terminal-only ship loop' reference for the tools section.

This idea elsewherebuilds onthe GitHub→Vercel path, fundamentals side builds onthe clean-staging discipline his push relied on

Go deeper

In one line: A terminal-only ship loop: GitHub CLI for repo + push, Vercel CLI for deploy, a prompted auto-push workflow for continuity, /usage for cost checkpoints, and RBAC (admin/seller/buyer) specified up front for marketplace-grade dashboards.

'I haven't even used the Vercel console… I've just done it using CLI itself, just with prompts' (2:20:10)

Front-end-first pivot prompt mid-build: 'I am currently in a live session and I wanna show the learners the actual front end' (1:51:42)

RBAC: three marketplace roles — admin, seller, buyer — set in the prompt, not retrofitted (2:18:08)

Cost transparency modeled: /usage read aloud three times; 'tokens is kinda like a black box… keep an eye on the usage' (2:48:47)

better-auth chosen by the model for auth; trainer speculates it's favored since Vercel acquired it — as heard (1:57:49)

Try it now

Take any repo you own and prompt: 'Connect this repo to Vercel using the Vercel CLI and give me the live link.' One sentence is the whole deploy runbook.

▶ Watch this taught: 2:07:58

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

Which two CLIs carried the entire ship loop, and where did the only failure occur?

GitHub CLI (repo + push) and Vercel CLI (deploy); the one failure was a Vercel build running on a stale snapshot while files were still changing — fixed by relaunching the deploy.

HyperFrames: a product explainer video from a skill and a catalog

how-to2:24:15

The marketplace got its own ad — storyboarded, animated in its own brand colors, and rendered — before the session ended.

HyperFrames is an open-source video-generation skill from the HeyGen team, positioned as a Remotion alternative ('they call it the better version'; he finds its subtitles stronger). Because it is a skill, the entire capability is: install command + catalog + prompt. It reads your code base for the design language, storyboards, then builds frame-by-frame with parallel workers and a checking pass ('checks and renders… mostly clean motion').

His proof it scales beyond demos: his own published videos — a 2-day Mumbai session cut into ~20 sub-minute YouTube shorts with face tracking, subtitles and his website's styling, plus a personal thumbnail skill trained on ten photos of himself — 'a lot of work which my editors would have done, I can just do with Claude Code directly.'

Worked example · from the session

The live 30-second explainer: hero line 'AI skills you can actually trust,' the four scanner layers animated, closing CTA 'install with a badge, not a leap of faith' — all pulled from the marketplace's actual design system.

Do it in this order

01Start a fresh Claude Code chat (Cmd+N) in the same project folder; switch back to the strong model ('really good with HyperFrames')
02Paste the HyperFrames skill install command from hyperframes.heygen.com, then paste the full /catalog page; pick effects you like (morph text, particles, flowchart, logo outro)
03Prompt for the deliverable: 30-second explainer, subtitles, no audio yet, 16:9, about 'what exactly is it that we do'
04Let it extract the design system from your own code base (it captured emerald primary, dark theme, safe/caution/danger colors), write storyboard.md, then dispatch 6 frame-builder workers in parallel
05Review the render; ask for changes against the storyboard file if unhappy (~5–10 minutes for frames)
06Have it move the output to the desktop with a clear name

Gotchas["Frame building is the slow phase — 'don't click escape too many times; if you do, it's just gonna stop'", "One frame overflowed its time window by 6 seconds; it regenerated frame 4 ('F4 stands for frame') on its own", 'The old /goal from the earlier build stayed active in a reused chat — goals persist per chat']

Why it matters

It closes the session's arc: the same terminal that built and shipped the product also produced its marketing — one interface, every department.

People get this wrong

AI video generation means avatar tools or subscriptions.

This is deterministic frame assembly from your own assets, free, inside the same coding agent — a skill, a catalog, and a prompt.

Skill + catalog + one prompt → design system → storyboard → six parallel frames → checked render

For your projects

['Course-site promo clips or session recaps could come from this exact loop — your styles.css is the design system it would extract.']

A 'session-to-shorts' pipeline for Paul's own course recordings, mirroring his Mumbai-session workflow.

This idea elsewherereappears inL3 multimodal production, done live

Go deeper

In one line: HyperFrames is HeyGen's open-source video skill for Claude Code: from a skill command, an effects catalog, and one prompt, it derives a design system from your code base, storyboards, renders frames in parallel with self-checks, and outputs finished video — no editor or subscription.

Free and open source, 34,000+ stars as heard; 'you do not need any subscription' (2:36:27)

Remotion is the cohort's known alternative (taught yesterday); pick per task — 'HyperFrames gave me better results for subtitles' (2:36:27)

Design-system extraction from the repo is automatic — 'it captured the exact brand: emerald primary, the dark, even the safe/caution/danger' (2:40:30)

Real-world pipeline shown from his Codex: session recording → transcribe → pick audience-worthy clips → shorts with face tracking → YouTube API auto-publish (2:26:17, 2:44:37)

His steering style when it drifted: 'I tried to get a little angry with my agent and give it a very strong prompt, and it did figure it out' (2:40:30)

Try it now

Point HyperFrames at any project folder with a visual identity and ask for a 30-second, 16:9, subtitled explainer of what it does. Judge the storyboard before the render.

▶ Watch this taught: 2:24:15

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

What does HyperFrames read to make the video match your product's look — and what file does it write before rendering?

It reads your code base to extract the design system (colors, theme), and writes storyboard.md — the reviewable plan — before dispatching the frame workers.

The zero-dollar audio layer: macOS TTS, Suno, FFmpeg

2:52:49

ElevenLabs wanted money; the Mac already had voices installed — so the ad got narrated for free.

With no ElevenLabs balance, the workaround is on-device: macOS ships text-to-speech voices (Samantha, Daniel — 'they also use premium Siri voices'), and Claude Code can find and drive that engine directly, generating narration without re-rendering the whole video. Suno supplies a 30-second background bed (downloaded as a file, no API), and the mixing instruction is plain language: music low, voice the focus, don't touch the voice. FFmpeg is named as the underlying open-source swiss-army knife — decode, encode, stream, duck background music, boost the main track — installable by CLI and discoverable by just asking the agent whether a package exists.

Worked example · from the session

The final cut plays live: robotic-but-serviceable narration ('we kinda hacked it out'), Suno bed underneath, three files on the desktop with 'final' winning.

Why it matters

It models the frugal path through the paid-API wall — ask what the machine already has before buying credits — and lands his rule: 'if you have an idea, ask it if there's a package that exists. Most likely there should already be a package.'

People get this wrong

Every capability needs its cloud API.

The session's best audio decision was discovering the OS already shipped the feature — ask what the machine has before buying credits.

For your projects

['Windows equivalent exists (SAPI voices / PowerShell System.Speech) — same ask-the-machine-first move if you ever narrate site walkthroughs.']

Go deeper

In one line: A free audio pipeline for generated video: on-device macOS TTS for narration, Suno for a downloaded music bed, FFmpeg for mixing and level control — assembled by asking the agent what packages exist rather than reaching for paid APIs.

ElevenLabs path abandoned at the paywall ('no balance, like 0?'); Mac TTS asked for and found instead (2:58:55)

Smart scope: 'rather than rerender the whole video, I'll generate a 3-liner' — narration added without a full re-render (3:00:57)

Suno used file-only (no API — 'not the same thing'); mixing prompt: 'background music a little low, the main focus should be the voice itself' (3:00:57, 2:56:54)

FFmpeg endorsed for 'reducing background music, increasing the main volume,' face tracking via installable packages (2:52:49)

Monitoring habit alongside: Claude Notch, an open-source macOS notch widget showing live token spend (Mac-only; a Windows learner is told it could be vibe-coded across) (2:48:47)

Try it now

Ask Claude Code: 'Does my machine have a built-in text-to-speech engine? If so, narrate this paragraph to a .wav.' Zero-cost proof in one prompt.

▶ Watch this taught: 2:52:49

Check yourself

Answer from memory first — the recall attempt is what makes it stick. Then reveal.

What was the question that unlocked free narration — and why is it a reusable pattern?

'Does Mac have internal text-to-speech? If so, can you integrate it?' — asking what the machine already ships beats paying for an API, and generalizes: 'most likely there should already be a package.'

Every concept, three clicks deep

The same concepts as a quick reference: the closed row is the glance, open is the study card, and every timestamp jumps into the recording.

01Three ways to run Claude Code: app, terminal, inside an IDEClaude Code runs as a subscription desktop app, an API-key terminal CLI, or the same CLI hosted inside an IDE;0:11:24›

Claude Code runs as a subscription desktop app, an API-key terminal CLI, or the same CLI hosted inside an IDE; capabilities match, but billing, resource weight, and update timing differ, with the terminal first in line.

App = subscription and account login; terminal = usage-based against your API key from platform.claude.com (0:13:25)

Terminal is 'very light on your computer' — the practical basis for firing up multiple agents (0:13:25)

Updates come to the terminal first, then the app (0:15:26)

IDE route: install the extension, and Claude Code opens inside the IDE's terminal — 'it has nothing to do with Antigravity's chat' (0:15:26)

02CLI vs MCP vs skill — the three ways to extend Claude CodeCLI: locally installed command-line program authenticated to your own account.0:29:41›

CLI: locally installed command-line program authenticated to your own account. MCP server: provider-hosted API wrapper granting defined tool calls, usually via API key and config. Skill: a .md file acting as a system prompt encoding a repeatable procedure.

'A CLI is a simple command you install in your Claude Code and simply authenticate' — no server of its own (0:31:43)

'An MCP server is an API wrapper which is exposed by the provider' — keys, config-file edits, and the provider decides the tool surface (0:31:43)

'A skill file is nothing but a very simple .md file which acts as a system prompt that Claude uses' (0:33:44)

Skill-as-IFTTT: deterministic, 'tells your LLM not to divert, not to think too much, but to exactly use the skill as is' (0:39:52)

03When to use which: CLI for enterprise, MCP for end users, skills for repetitionChoose a CLI when you need full-surface, first-party control (enterprise/B2B, multi-client);0:35:48›

Choose a CLI when you need full-surface, first-party control (enterprise/B2B, multi-client); an MCP when a provider's bounded tool calls are enough (personal/end-user builds); a skill whenever the task is repetitive and already solved once.

CLIs authenticate agents that are themselves CLI-powered — Hermes, OpenClaw (0:35:48)

GWS CLI called 'the most used CLI' — whole Google Workspace, email stack included, production-grade (0:35:48)

Enterprises avoid depending 'on a 3rd-party provider for what the MCP is gonna give them access to' (0:35:48)

Skills: 'teaching your LLM something that is repetitive'; his prediction — a marketplace where agents buy skills for themselves (0:39:52, 1:21:26)

04GitHub CLI: your whole repo history, conversationallyThe GitHub CLI, installed and authenticated inside Claude Code via a device-login flow, lets you query and…0:19:29›

The GitHub CLI, installed and authenticated inside Claude Code via a device-login flow, lets you query and control repositories in natural language — Claude translates to git/gh commands it already knows.

'Previously they had to remember these commands… git push or git pull or git rebase… now you do not have to remember any of these' (0:19:29)

Device flow: link → account → one-time code → authorize (0:25:34)

Verification habit modeled live: Claude's answer about the latest commit is checked against the real GitHub page (0:27:37)

Sarah (no GitHub account) told to create one — 'this is where we push our code'; account first, CLI later (0:17:28)

05shadcn/ui and the wrapper tower: Next.js → components → aggregator → CLI → skillshadcn/ui is an open-source aggregator of Next.js components, installable via its CLI and drivable via a sk…0:58:09›

shadcn/ui is an open-source aggregator of Next.js components, installable via its CLI and drivable via a skill; commercial kits like 21st.dev and Magic UI are wrappers over it. Skill + CLI together give an agent token-cheap command of the whole layer.

Foundation upward: Next.js → community components → shadcn/ui aggregator → shadcn CLI → shadcn skill (0:58:09–1:02:12)

'shadcn' is a pen name; he works at Vercel (1:00:10)

21st.dev and Magic UI are shadcn wrappers; people pay for them anyway — 'Lovable exists, but people pay for websites. It's just that.' (1:04:15, 1:13:18)

Skill + CLI beats CLI alone on tokens: 'now our LLM is equipped with what commands to use, when to use' (1:15:20)

06Context7 reconsidered: when the model outgrows the docs-fetching MCPContext7 is a documentation-retrieval MCP whose default use is now discouraged: modern models fetch and dig…0:56:05›

Context7 is a documentation-retrieval MCP whose default use is now discouraged: modern models fetch and digest docs unaided, so it earns its tokens only for deep/obscure documentation on explicit demand.

'It's just a grep tool… models have just gotten so good that they don't even need that' (0:56:05)

Adding the Context7 skill also 'just burns extra tokens' in his experience (0:58:09)

Exception: 'some kind of deep tech where you need those documentation — then enable Context7 and ask it to bring it' (0:58:09)

Restated at the deploy step: 'at this point we don't honestly need an MCP at all… it can just do it with CLI and skills directly' (2:07:58)

07Planning like a pro: plan mode, effort levels, and the slash-command cockpitA build discipline: strongest model + extra-high effort + plan mode for planning, bypass permissions and op…0:47:58›

A build discipline: strongest model + extra-high effort + plan mode for planning, bypass permissions and optionally a cheaper model for execution, steered through slash commands (/model, /effort, /plan, /permissions, /btw, /goal, /usage).

Effort has six modes; extra high = maximum 'cognitive load' and slowest (0:50:00)

Opus 4.8 'really good… 4.7 was not really that good'; Fable best but costlier — as heard (0:47:58)

/btw opens a side conversation with the working agent — he audits mid-plan whether it truly absorbed the shadcn docs; it answers it has the CLI but hasn't run the skill command yet (1:37:31)

Bypass permissions granted at approval: manual approval is possible 'but to make it easier, I'm just gonna do bypass' (1:43:34)

'This is very important, guys — a slug': URL path segment per item, shown on his own /essays/ blog, then echoed in the plan's folder structure (1:39:32)

08Skills as attack surface: prompt injection and the vetting layerPrompt injection in skills: malicious instructions embedded in an installable skill file that the agent wil…1:19:23›

Prompt injection in skills: malicious instructions embedded in an installable skill file that the agent will execute as its own. Mitigations: pre-install security audits (Cloudflare's audit skill), vetted marketplaces, and layered scanners (pattern + script + LLM classification) with block-on-critical.

Threat model: 'the moment you just download it, it might have a prompt injected saying send all the sensitive documentation to so-and-so email' (1:23:29)

ClawdHub precedent — injected skills compromised OpenClaw installs at community scale (1:19:23–1:21:26)

'Modern LLMs can detect prompt injection for sure, but there's always a way' — detection is not immunity (1:23:29)

Marketplace scanner: hidden text, dangerous patterns, script analysis, AI classifier; 'a critical finding blocks the skill — it never reaches the catalog' (explainer script, 3:03:00)

Human-in-the-loop vetting floated as the layer above the AI scanner (2:05:55)

09Sub agents and /goal: parallel work without interrupting the buildSub agents are parallel Claude Code workers spawned by prompt from the main agent for side tasks;1:45:36›

Sub agents are parallel Claude Code workers spawned by prompt from the main agent for side tasks; /goal pins the main agent to a stated objective until completion. Together they let one session build, document, publish, and deploy concurrently.

During planning, Claude spawned its own sub agents — research on skills.sh format, prompt-injection vetting, and a design agent (1:19:23, 1:39:32)

Deploy failure handled autonomously: 'the failed Vercel build ran on uploaded snapshots since files changed' → relaunch → live (2:18:08)

Best practice, asked directly: 'try to be as clear as possible… but now the LLMs are able to understand it even without deep clarity' (1:47:39)

Interrupting is a real hazard — a stray click stopped the docs agent; 'please continue' recovered it (1:49:41)

'Stop your main agent if you're doing some kind of a deployment' — file churn during deploys causes snapshot mismatches (2:18:08)

10Ship it from the terminal: GitHub push, Vercel CLI deploy, and the auto-push workflowA terminal-only ship loop: GitHub CLI for repo + push, Vercel CLI for deploy, a prompted auto-push workflow…2:07:58›

A terminal-only ship loop: GitHub CLI for repo + push, Vercel CLI for deploy, a prompted auto-push workflow for continuity, /usage for cost checkpoints, and RBAC (admin/seller/buyer) specified up front for marketplace-grade dashboards.

'I haven't even used the Vercel console… I've just done it using CLI itself, just with prompts' (2:20:10)

Front-end-first pivot prompt mid-build: 'I am currently in a live session and I wanna show the learners the actual front end' (1:51:42)

RBAC: three marketplace roles — admin, seller, buyer — set in the prompt, not retrofitted (2:18:08)

Cost transparency modeled: /usage read aloud three times; 'tokens is kinda like a black box… keep an eye on the usage' (2:48:47)

better-auth chosen by the model for auth; trainer speculates it's favored since Vercel acquired it — as heard (1:57:49)

11HyperFrames: a product explainer video from a skill and a catalogHyperFrames is HeyGen's open-source video skill for Claude Code: from a skill command, an effects catalog,…2:24:15›

HyperFrames is HeyGen's open-source video skill for Claude Code: from a skill command, an effects catalog, and one prompt, it derives a design system from your code base, storyboards, renders frames in parallel with self-checks, and outputs finished video — no editor or subscription.

Free and open source, 34,000+ stars as heard; 'you do not need any subscription' (2:36:27)

Remotion is the cohort's known alternative (taught yesterday); pick per task — 'HyperFrames gave me better results for subtitles' (2:36:27)

Design-system extraction from the repo is automatic — 'it captured the exact brand: emerald primary, the dark, even the safe/caution/danger' (2:40:30)

Real-world pipeline shown from his Codex: session recording → transcribe → pick audience-worthy clips → shorts with face tracking → YouTube API auto-publish (2:26:17, 2:44:37)

His steering style when it drifted: 'I tried to get a little angry with my agent and give it a very strong prompt, and it did figure it out' (2:40:30)

12The zero-dollar audio layer: macOS TTS, Suno, FFmpegA free audio pipeline for generated video: on-device macOS TTS for narration, Suno for a downloaded music b…2:52:49›

A free audio pipeline for generated video: on-device macOS TTS for narration, Suno for a downloaded music bed, FFmpeg for mixing and level control — assembled by asking the agent what packages exist rather than reaching for paid APIs.

ElevenLabs path abandoned at the paywall ('no balance, like 0?'); Mac TTS asked for and found instead (2:58:55)

Smart scope: 'rather than rerender the whole video, I'll generate a 3-liner' — narration added without a full re-render (3:00:57)

Suno used file-only (no API — 'not the same thing'); mixing prompt: 'background music a little low, the main focus should be the voice itself' (3:00:57, 2:56:54)

FFmpeg endorsed for 'reducing background music, increasing the main volume,' face tracking via installable packages (2:52:49)

Monitoring habit alongside: Claude Notch, an open-source macOS notch widget showing live token spend (Mac-only; a Windows learner is told it could be vibe-coded across) (2:48:47)

Tools referenced

Tool	Coverage	Moment	Context
Claude Code	demonstrated	0:11:24	All three interfaces shown; terminal is the session's home — plan mode, effort, sub agents, /goal, /btw, /usage
GitHub CLI	demonstrated	0:19:29	Installed and device-authenticated live; conversational repo queries verified against github.com
shadcn/ui	demonstrated	0:58:09	Component tour, theming; installed into the build via CLI docs paste + skill from skills.sh (230k+ installs)
Vercel CLI	demonstrated	2:09:59	Docs page pasted as context; deploy run by a sub agent; one failed build relaunched to a live link
HyperFrames	demonstrated	2:32:23	Skill + catalog from hyperframes.heygen.com; 30-second explainer storyboarded and rendered live
Suno	demonstrated	2:56:54	30-second background bed, file download only — 'Suno API is not the same thing'
Codex	demonstrated	0:09:22	His own studio shown: one autonomous 1d 1h 17m run on 'GPT 5.6 Sol' (as heard); YouTube API auto-publish configured
Claude Notch	demonstrated	2:48:47	Open-source macOS notch widget for live token spend; Mac-only
Antigravity	demonstrated	0:15:26	Google's VS Code-fork IDE, used only as a host for the Claude Code extension
Next.js	explained	0:58:09	Named the foundation framework of the wrapper tower; the marketplace is a Next.js app-router TypeScript build
Context7	explained	0:56:05	Actively retired: 'just a grep tool'; keep only for deep/obscure docs
FFmpeg	explained	2:52:49	Named as the media engine for mixing, ducking, encoding; 'found it by just prompting Codex'
skills.sh	explained	1:08:17	The incumbent being disrupted: 836k skills (as heard), Vercel-run, no payments or real vetting
Docker	explained	1:55:46	Chosen by the plan for enterprise-grade Postgres; skipped live to protect the demo laptop
better-auth	explained	1:57:49	Model-selected auth framework; 'acquired by Vercel' speculation as heard
Cloudflare security audit skill	explained	1:23:29	Prescribed pre-install audit for any third-party skill; link dropped in chat
Remotion	mentioned	2:32:23	Yesterday's tool (session 13); positioned as the alternative HyperFrames competes with
ElevenLabs	mentioned	2:58:55	Abandoned at the paywall in favor of macOS TTS
21st.dev	mentioned	1:04:15	shadcn wrapper turned YC-backed startup — the wrapper-economy exhibit
Magic UI	mentioned	1:13:18	Second shadcn-wrapper example people pay for
VAPI	mentioned	0:21:30	Used both ways in the CLI-vs-MCP decision rule
Supabase	mentioned	0:21:30	Listed among platforms whose CLIs plug into Claude Code
Apify	mentioned	1:23:29	Cited as marketplace precedent in the scraping-legality gray-area answer
Gumroad	mentioned	1:17:22	Where people already sell Claude skill packs and Notion templates
HeyGen	mentioned	2:32:23	Publisher of the open-source HyperFrames skill
OpenClaw	mentioned	1:19:23	Formerly 'Clawd' until Anthropic's trademark action; its ClawdHub was the injection incident
Hermes	mentioned	0:35:48	CLI-powered agent with company-wide memory; 'you can basically do whatever you can do in Claude Code'
GWS CLI	mentioned	0:35:48	'The most used CLI' — full Google Workspace control; promised for a later session
Stripe	mentioned	0:45:56	Planned for the marketplace's paid tier ('Stripe also has a CLI'); deferred out of version 1
Lovable	mentioned	2:03:54	The comparison baseline the shadcn skill beats on UI cleanliness

Session materials

Archived locally on V: — click to open. Companion pages link to the LMS.

pdf

Outskill_Claude_Code_10_Page_Complete_Resource_Document.pdf

279 KB

Action items

Create a GitHub account if you don't have one — it's the prerequisite the session pauses for (0:17:28)
Install GitHub CLI inside Claude Code via the device-login flow and ask it for your latest commit (0:23:31)
Before installing any third-party skill, run it through the Cloudflare security audit skill (1:23:29)
Fork/star skills-marketplace-outskill and build your own marketplace variant on the MIT base (1:55:46)
Try one HyperFrames build: 30-second, 16:9, subtitled explainer of any project folder you own (2:36:27)
Adopt the cost habit: /usage at milestones, Claude Notch (Mac) for always-on spend visibility (2:48:47)
Fill the CSAT form; Q&A deferred to office hours (3:07:04)

Resources mentioned

Resources

docGitHub CLI install prompt (verbatim, typed after voice input failed) 0:23:31
docContext-only folder prompt — restraint before plan mode (verbatim as spoken) 0:52:01
docMarketplace product prompt into plan mode (verbatim as spoken; pasted alongside the shadcn CLI docs page and the shadcn skill command) 1:08:17
docSub agent spawn prompt — docs + open-source repo (verbatim as spoken) 1:45:36
docFront-end pivot prompt (verbatim as spoken) 1:53:44
docVercel deploy prompt (verbatim as spoken; Vercel CLI docs page pasted first) 2:12:00
doc/goal persistence prompt (verbatim as spoken) 2:10:00
docAuto-push workflow prompt (verbatim as spoken) 2:05:55
docHyperFrames explainer prompt (verbatim as spoken; skill command + catalog pasted first) 2:36:27
docMusic mix prompt (verbatim as spoken; Suno file pasted into the chat) 2:56:54
docFree-voiceover discovery prompt (verbatim as spoken) 2:58:55
docskills-marketplace-outskill repository (MIT, open-sourced live for the cohort) 1:55:46
docSkills marketplace v1 plan (.md written by the sub agent) 1:41:33
docHyperFrames — skill command + effects catalog 2:32:23
docGitHub CLI documentation 0:21:30
docshadcn/ui + shadcn skill 1:00:10
docCloudflare security audit skill 1:23:29
docClaude Notch (open-source macOS usage widget) 2:48:47

Extraction notes

This page was built from an auto-generated transcript, which garbles product and people's names. Those were corrected silently in everything above and logged here for transparency. The warnings flag claims that were true on the recording day but change fast.

Transcript corrections applied

The transcript says	The trainer actually means
cloud code / clod code / clogged code / flawed code / CloudCore / CloudQuote	Claude Code
Harshad / Hassett / Parshad	Harshit (trainer; same garble family as sessions 7 and 17)
shared CN / shared c n / Shad Cien / chat c n / Shad Sien	shadcn / shadcn/ui (the maintainer's pen name)
Wartsell / Wersel / Werschel / Warsail / or sell / word cell / Wacelle / Versal	Vercel
codecs / GPD 5.6	Codex / GPT 5.6 ('Sol' as heard — Codex model name)
contacts 7	Context7
hyper frames dot hajen dot com / Hagen	hyperframes.heygen.com / HeyGen
FFMPG / FFMEG / FM FPMG / FSM	FFmpeg
claudhub / Claude Hub / Claude bot c-l-a-w-d	ClawdHub (OpenClaw's skill hub, as heard); 'Clawd' was OpenClaw's original name
skills dot s h	skills.sh
g w s c l I / g w I	GWS CLI (Google Workspace CLI)
Zappy CLI / 11 labs	VAPI CLI / ElevenLabs
anti gravity	Antigravity (Google's IDE)
Ultracode / Ultra code	as heard — the planning toggle above extra-high effort (relationship to 'ultrathink'-style modes unverified)
better off (in the acquisition aside)	better-auth
x caddy draw	Excalidraw (the whiteboard he draws on)
STT engine (for speech output)	TTS engine (speaker misspoke; context is text-to-speech)

True on recording day — verify before relying

Model names as heard and time-bound: Opus 4.8 ('really good'), 4.7 ('not really that good'), 4.6 (execution tier), Fable ('the best one right now, costs a lot more'), GPT 5.5 / GPT 5.6 'Sol'. Version-check before reuse.
skills.sh figures as heard: 836,000+ skills, run by Vercel; shadcn skill at 230k+ installs; HyperFrames at 34k+ stars — all moving numbers.
'better-auth acquired by Vercel' is trainer speculation confirmed only by an on-screen banner ('joining Vercel') — verify before citing.
Effort menu described as six modes; slash-command surface (/btw, /goal, /usage, /permissions, /plan, /model, /effort) is version-dependent — his note that '/agent is removed' shows the churn.
Live costs quoted: $21 → $34 → $45 across the session (~1h40m API duration at the first reading) — useful as a magnitude anchor only.
Claude Notch is macOS-only at recording; a Windows port is 'vibe-codeable' per the trainer.
ClawdHub/OpenClaw injection incident and Anthropic trademark rename retold from memory — dates unstated; treat as folklore-grade until sourced.