Security-vetted · cross-agent · reproducible
Scaffold a stack.
Ship with vetted AI skills.
bwai scaffolds runnable project starters pre-wired for Claude,
Cursor, Codex, and Copilot — with NVIDIA SkillSpector gating and a
skills.lock provenance file.
npx bwai-cli install-skill bwai-advisor --global
# then in any chat: $bwai-advisor Read @my-idea.md
bwai new nextjs-app ./my-app --agents claude,cursor
npm package: bwai-cli · after npm i -g bwai-cli, run bwai-cli or bwai · Node.js 20+
Idea → advisor → scaffold
Not sure which starter fits? Install $bwai-advisor once, shape the goal
(or drop a markdown brief), then run the bwai new command it prints.
-
Install —
npx bwai-cli install-skill bwai-advisor --global(also installsstartup-goal) -
Ask —
$bwai-advisorwith your idea or@brief.md -
Scaffold — run the recommended
bwai new …command, then continue with$founding-engineerinside the project
Already know the stack? Skip the advisor and pick a boilerplate below.
Boilerplates
Seven opinionated starters. Each bundles a curated skill set for its stack.
-
nextjs-app
Next.js App Router + React + TypeScript, Vercel-ready.
-
nextjs-ai-app
Next.js AI product starter — AI SDK chat, Zod tools, Playwright MCP.
-
express-api
Express.js ESM API on Vercel with HTTP tests.
-
fastify-api
Fastify ESM API with schema-first routes and tests.
-
python-service
FastAPI + pytest with TestClient integration tests.
-
react-native-app
Expo / React Native + TypeScript for iOS, Android, web.
-
node-service
Minimal Node ESM service with zero-dep
node:test.
Visible safety gate
- SkillSpector — every bundled skill is scanned; CI fails above risk threshold 30 in the catalog.
-
Provenance —
skills.lockrecords SHA-256, source, and scan status per skill. -
Reports — JSON + SARIF under
safety-reports/, committed in the catalog repo.
Get started
npx bwai-cli install-skill bwai-advisor --global
npx bwai-cli list-boilerplates
npx bwai-cli new fastify-api ./api --agents claude,cursor,copilot