Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/akasecurity/claude-tools/wrap-upgit clone --depth 1 https://github.com/akasecurity/claude-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/akasecurity/claude-tools/wrap-up)<a href="https://agentmods.dev/commands/akasecurity/claude-tools/wrap-up"><img src="https://agentmods.dev/badge/commands/akasecurity/claude-tools/wrap-up.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00019 | $0.00874 |
| Opus 5 | $0.00010 | $0.00437 |
| Sonnet 5 | $0.00004 | $0.00175 |
| Haiku 4.5 | $0.00002 | $0.00087 |
Grade A, and why
wrap-up scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/wrap-up
Leave the working tree clean and ready for you to review and commit. Prepare; do not commit, merge, or push unless explicitly asked. Work top-to-bottom; skip steps that don't apply.
-
Defer to the repo. If this project's
CLAUDE.md/AGENTS.mddefines a session-end or wrap-up process, follow that instead of the generic steps below. -
Establish context — this repo may not be yours alone. Note the current branch, worktree (
git worktree listif several), and upstream sync state (git status -sbahead/behind). If a rebase / merge / cherry-pick is in progress, stop and report — never wrap up over someone's in-flight operation. If the index already holds staged changes this session didn't make, leave them exactly as they are and say so — another session or the developer may own them. -
Survey the session. Run
git statusandgit diff --stat(plusgit difffor anything non-trivial). Summarize what changed and why in 2–4 sentences. -
Verify. Run the checks the repo's conventions define, or the obvious project tests / linters / build. When the full suite is expensive, scope to what this session touched. Report real results — never assert "should work." If something fails, stop and report it rather than staging a broken change (unless the user says to proceed).
-
Stage intentionally — or just propose. Stage only the files this session changed, by name (never a blind
git add -A). Before staging, scan the diff for secrets / credentials /.env, build artifacts, large files, and anything unrelated; leave those out and flag them. If a file mixes this session's work with unrelated or someone else's edits, don't stage it — list the exactgit addcommands instead and let the developer stage selectively. -
Draft the commit — don't run it. Propose a clear, conventional message (
fix:/feat:/docs:/refactor:…) describing the change, not the process. If the work is several unrelated changes, propose splitting it into atomic commits. If you're onmain/masteror a protected branch in a repo that works by branches/PRs, propose a feature-branch name to move the work to — don't create it. Then let the developer review the diff and commit — only commit yourself if they explicitly ask. -
Docs. Only if the repo's conventions call for it (or the user asked), update the changelog / README. Don't invent ceremony the repo doesn't already use.
-
Surface true loose ends — things we could genuinely lose. A loose end is work that is at risk right now because nothing durable holds it: uncommitted or unpushed changes, an undocumented decision or finding made this session, a half-applied migration, a broken state left mid-flight. Those are the only things to flag as loose ends — call them out plainly so they aren't lost.
- Do NOT list as loose ends follow-ups already safely captured somewhere durable — backlog tasks, tracked issues, plan checklists, saved memory. They aren't at risk; they just await execution.
- You may still add a brief "Captured for later" note pointing to where such follow-ups live (e.g. "T5/T6 in the backlog"), but keep it separate from loose ends and don't dress it up as unfinished business.
- If nothing is genuinely at risk, say so — "no loose ends" is a valid result.
Never merge. Never push.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 65 lines · 19 tokens per session scan A a6d0611fe2be
wrap-up is a command published in the GitHub repository akasecurity/claude-tools (10 stars, last pushed 1mo ago), licensed MIT. It adds 19 tokens to every session and 874 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
commit
Create a commit using the git-commit-creator skill.
cr
When user uses /cr slash command, review uncommitted code changes with reusable language-aware rules, preferring project-local review commands or rules when they exist.
aod.project-plan
Create implementation plan with dual sign-off (PM + Architect) - Streamlined v2.
aod.blueprint
Unified project setup & story generation — auto-detects new vs existing projects.
commit
智能创建 git 提交,分析代码变更并生成符合项目规范的提交信息.
pr-review
Review the current branch changes and suggest PR content.