Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/edutrul/drupal-ai/create-prgit clone --depth 1 https://github.com/edutrul/drupal-aiWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00035 | $0.00755 |
| Opus 5 | $0.00017 | $0.00378 |
| Sonnet 5 | $0.00007 | $0.00151 |
| Haiku 4.5 | $0.00003 | $0.00076 |
Grade B, and why
create-pr scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
allowed-tools: Bash(git branch --show-current:), Bash(git log *:), Bash(git push *:), Bash(gh pr create:), Bash(gh pr view:), Bash(acli jira auth status:), Bash(acli jira workitem view:), Bash(acli jira workitem transiti How it starts
The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create PR
Create a Pull Request from the current branch targeting develop, following project conventions.
Input
No arguments required. Operates on the current branch.
Workflow
1. Get current branch
git branch --show-current
Detect the Jira ticket from the branch name (e.g. PRJ-356-lucidworks-indexing-endpoints → PRJ-356).
If no ticket detected → ask the user for the ticket ID before continuing.
2. Get recent commits for context
git log origin/develop..HEAD --oneline
Use commit messages to understand the scope of the PR.
3. Push branch if needed
Check if the branch has a remote tracking branch. If not:
git push -u origin <branch>
4. Single ask — PR details
Display detected info and ask once:
Branch: Jira ticket:
PR title: (pre-filled as
PRJ-XXX: <description inferred from commits>) PR description: (leave blank to auto-generate from commits, or type your own) Create as draft? (Y/n)
- If user accepts the pre-filled title → use it
- If user edits → use their version
- Default is draft (
Y)
5. Create the PR
gh pr create \
--base develop \
--title "<title>" \
--body "<body>" \
--draft
PR body template:
## Summary
<bullet points from commit messages>
## Jira
<ticket-url>
## Test plan
- [ ]
If user chose not to draft → omit --draft.
6. Jira auth check
acli jira auth status
If fails → skip Jira steps silently, list as manual action in summary.
7. Move Jira ticket to In Progress (if not already)
acli jira workitem view <ticket>
If current status is not In Progress → transition it:
acli jira workitem transition --key <ticket> --status "In Progress"
If already In Progress → skip silently.
8. Final summary
| Action | Result |
|---|---|
| Branch pushed | ✓ / already up to date |
| PR created | # — |
| Draft | yes / no |
| Jira ticket | |
| Jira status | In Progress / skipped (reason) |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 146 lines · 35 tokens per session scan B 94065d121a38
create-pr is a command published in the GitHub repository edutrul/drupal-ai (71 stars, last pushed 2mo ago), licensed MIT. It adds 35 tokens to every session and 755 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
build
Run full verification pipeline.
fest-show
Show festival progression (in-progress tasks, roadmap, and dependency view).
camera-ready
Convert an accepted anonymous-submission LaTeX paper (AAAI/AIES/ACM-style) to camera-ready and implement the accepted reviews. Use when a paper is accepted with no rebuttal and you need to de-anonymize, add copyright, turn on section numbering, implement each reviewer's minor revisions, optionally move proofs to a…
superpowers-execute
Execute the current GSD phase plan with Superpowers instead of gsd-execute-phase.
generate-rules
Generate development rules and standards into RULES.md.
config
Command "config" from sdebruyn/fabric-dw-mcp-cli, covering configuration & defaults, http retry budget, sql retry budget, mcp workspace allowlist {#mcp-workspace-allowlist} and mcp server log level.