Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/akasecurity/claude-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/akasecurity/claude-tools/wrap-up)<a href="https://agentmods.dev/commands/akasecurity/claude-tools/wrap-up"><img src="https://agentmods.dev/badge/commands/akasecurity/claude-tools/wrap-up/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/akasecurity/claude-tools/wrap-up"><img src="https://agentmods.dev/badge/commands/akasecurity/claude-tools/wrap-up.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00019 | $0.00971 |
| Opus 5.5 | $0.00008 | $0.00388 |
| Sonnet 5.5 | $0.00004 | $0.00194 |
| Haiku 4.5 | $0.00002 | $0.00097 |
Grade A, and why
wrap-up scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/wrap-up
Leave the working tree clean and ready for you to review and commit. Prepare; do not commit, merge, or push unless explicitly asked. Work top-to-bottom; skip steps that don't apply.
-
Defer to the repo. If this project's
CLAUDE.md/AGENTS.mddefines a session-end or wrap-up process, follow that instead of the generic steps below. -
Establish context — this repo may not be yours alone. Note the current branch, worktree (
git worktree listif several), and upstream sync state (git status -sbahead/behind). If a rebase / merge / cherry-pick is in progress, stop and report — never wrap up over someone's in-flight operation. If the index already holds staged changes this session didn't make, leave them exactly as they are and say so — another session or the developer may own them. -
Survey the session. Run
git statusandgit diff --stat(plusgit difffor anything non-trivial). Summarize what changed and why in 2–4 sentences. -
Verify. Run the checks the repo's conventions define, or the obvious project tests / linters / build. When the full suite is expensive, scope to what this session touched. Report real results — never assert "should work." If something fails, stop and report it rather than staging a broken change (unless the user says to proceed).
-
Stage intentionally — or just propose. Stage only the files this session changed, by name (never a blind
git add -A). Before staging, scan the diff for secrets / credentials /.env, build artifacts, large files, and anything unrelated; leave those out and flag them. If a file mixes this session's work with unrelated or someone else's edits, don't stage it — list the exactgit addcommands instead and let the developer stage selectively. -
Draft the commit — don't run it. Propose a clear, conventional message (
fix:/feat:/docs:/refactor:…) describing the change, not the process. If the work is several unrelated changes, propose splitting it into atomic commits. If you're onmain/masteror a protected branch in a repo that works by branches/PRs, propose a feature-branch name to move the work to — don't create it. Then let the developer review the diff and commit — only commit yourself if they explicitly ask. -
Docs. Only if the repo's conventions call for it (or the user asked), update the changelog / README. Don't invent ceremony the repo doesn't already use.
-
Surface true loose ends — things we could genuinely lose. A loose end is work that is at risk right now because nothing durable holds it: uncommitted or unpushed changes, an undocumented decision or finding made this session, a half-applied migration, a broken state left mid-flight. Those are the only things to flag as loose ends — call them out plainly so they aren't lost.
- Do NOT list as loose ends follow-ups already safely captured somewhere durable — backlog tasks, tracked issues, plan checklists, saved memory. They aren't at risk; they just await execution.
- You may still add a brief "Captured for later" note pointing to where such follow-ups live (e.g. "T5/T6 in the backlog"), but keep it separate from loose ends and don't dress it up as unfinished business.
- If nothing is genuinely at risk, say so — "no loose ends" is a valid result.
-
Continuation prompt. If work remains for a later session (open plan steps, deferred follow-ups, a handoff), end with a short copy-paste prompt for a fresh session in a fenced block: the repo path, the goal, where things stand, the next concrete step, and pointers (files, branch, TODO section). Keep it minimal; the fresh session reads the repo itself. Skip it when nothing remains.
Never merge. Never push.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed · +7 lines 6ddf014bce29
- 1mo ago First seen · 65 lines · 19 tokens per session scan A a6d0611fe2be
wrap-up is a command published in the GitHub repository akasecurity/claude-tools (11 stars, last pushed 9d ago), licensed MIT. It adds 19 tokens to every session and 971 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
block-no-verify
Set up PreToolUse hook to block --no-verify and other git bypass flags in Claude Code projects.
work-commit-push-pr
Pointer: Claude Code ships a native /commit-push-pr that owns the commit + push + PR macro. This command adds the foundation's pre-flight gate and convention sources on top — it does not re-implement the macro.
work-commit
Prepare and perform a clean commit following conventions.
work-flow-feature
Complete workflow for developing a new feature, from exploration to merge.
work-pr
Creates a complete and well-documented Pull Request.
ops-hotfix
Command "ops-hotfix" from christopherlouet/claude-base, covering hotfix agent, request context, objective, workflow and expected output.