wrap-up

wrap-up is a command for coding agents from akasecurity/claude-tools. It costs 19 tokens per session (874 once invoked), scanned A, original, MIT.

A session-ending command that summarizes changes, checks the project, and prepares the Git working tree for review and committing.

In plain words
What is it for?
Use it at the end of a coding session to inspect the branch and worktree, review changes, run relevant tests or linters, and stage appropriate files.
Why use it?
It helps you understand what changed and whether checks passed before you commit, while avoiding an unintended commit, merge, or push.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/akasecurity/claude-tools/wrap-up
Clone the repo
git clone --depth 1 https://github.com/akasecurity/claude-tools

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for wrap-up

README.md
[![agentmods](https://agentmods.dev/badge/commands/akasecurity/claude-tools/wrap-up.svg)](https://agentmods.dev/commands/akasecurity/claude-tools/wrap-up)
Your own site
<a href="https://agentmods.dev/commands/akasecurity/claude-tools/wrap-up"><img src="https://agentmods.dev/badge/commands/akasecurity/claude-tools/wrap-up.svg" alt="Measured on agentmods" height="20"></a>
Per session 19 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 874 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00019 $0.00874
Opus 5 $0.00010 $0.00437
Sonnet 5 $0.00004 $0.00175
Haiku 4.5 $0.00002 $0.00087

Measured 4d ago against content hash a6d0611fe2be, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

wrap-up scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

config/commands/wrap-up.md · 65 lines

What it actually says

/wrap-up

Leave the working tree clean and ready for you to review and commit. Prepare; do not commit, merge, or push unless explicitly asked. Work top-to-bottom; skip steps that don't apply.

  1. Defer to the repo. If this project's CLAUDE.md / AGENTS.md defines a session-end or wrap-up process, follow that instead of the generic steps below.

  2. Establish context — this repo may not be yours alone. Note the current branch, worktree (git worktree list if several), and upstream sync state (git status -sb ahead/behind). If a rebase / merge / cherry-pick is in progress, stop and report — never wrap up over someone's in-flight operation. If the index already holds staged changes this session didn't make, leave them exactly as they are and say so — another session or the developer may own them.

  3. Survey the session. Run git status and git diff --stat (plus git diff for anything non-trivial). Summarize what changed and why in 2–4 sentences.

  4. Verify. Run the checks the repo's conventions define, or the obvious project tests / linters / build. When the full suite is expensive, scope to what this session touched. Report real results — never assert "should work." If something fails, stop and report it rather than staging a broken change (unless the user says to proceed).

  5. Stage intentionally — or just propose. Stage only the files this session changed, by name (never a blind git add -A). Before staging, scan the diff for secrets / credentials / .env, build artifacts, large files, and anything unrelated; leave those out and flag them. If a file mixes this session's work with unrelated or someone else's edits, don't stage it — list the exact git add commands instead and let the developer stage selectively.

  6. Draft the commit — don't run it. Propose a clear, conventional message (fix: / feat: / docs: / refactor: …) describing the change, not the process. If the work is several unrelated changes, propose splitting it into atomic commits. If you're on main/master or a protected branch in a repo that works by branches/PRs, propose a feature-branch name to move the work to — don't create it. Then let the developer review the diff and commit — only commit yourself if they explicitly ask.

  7. Docs. Only if the repo's conventions call for it (or the user asked), update the changelog / README. Don't invent ceremony the repo doesn't already use.

  8. Surface true loose ends — things we could genuinely lose. A loose end is work that is at risk right now because nothing durable holds it: uncommitted or unpushed changes, an undocumented decision or finding made this session, a half-applied migration, a broken state left mid-flight. Those are the only things to flag as loose ends — call them out plainly so they aren't lost.

    • Do NOT list as loose ends follow-ups already safely captured somewhere durable — backlog tasks, tracked issues, plan checklists, saved memory. They aren't at risk; they just await execution.
    • You may still add a brief "Captured for later" note pointing to where such follow-ups live (e.g. "T5/T6 in the backlog"), but keep it separate from loose ends and don't dress it up as unfinished business.
    • If nothing is genuinely at risk, say so — "no loose ends" is a valid result.

Never merge. Never push.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 65 lines · 19 tokens per session scan A a6d0611fe2be

Subscribe to this mod's changes

wrap-up is a command published in the GitHub repository akasecurity/claude-tools (10 stars, last pushed 1mo ago), licensed MIT. It adds 19 tokens to every session and 874 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.