robosystems: Command for Claude Code

.claude/commands/create-pr.md

create-pr is a command for Claude Code from RoboFinSystems/robosystems. It costs 18 tokens per session (2,588 once invoked), scanned A, original, Apache-2.0.

A command for opening a GitHub pull request, which is a proposed set of code changes for review and merging. It writes the title and description from the work done in the current session.

In plain words
What is it for?
Use it after making changes on a branch when you want to create a pull request with an accurate, public-facing summary. It includes checks and guidance for this Python service and its tenant-specific data graphs.
Why use it?
It avoids descriptions based only on changed files and commit messages, which can miss why the work was done or describe it inaccurately.

Command for Claude Code

Written for Claude Code: argument-hint in frontmatter. Also seen: mentions Claude Code.

This is RoboFinSystems/robosystems's own configuration. It tells Claude Code how to work on robosystems itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything robosystems configures →

Reuse

Borrowing it

Nothing to install: this file belongs to RoboFinSystems/robosystems. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/RoboFinSystems/robosystems/main/.claude/commands/create-pr.md
Clone the repo
git clone --depth 1 https://github.com/RoboFinSystems/robosystems

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for create-pr

README.md
[![agentmods](https://agentmods.dev/badge/commands/robofinsystems/robosystems/create-pr/github.svg)](https://agentmods.dev/commands/robofinsystems/robosystems/create-pr)
Your own site
<a href="https://agentmods.dev/commands/robofinsystems/robosystems/create-pr"><img src="https://agentmods.dev/badge/commands/robofinsystems/robosystems/create-pr/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for create-pr

Your own site · 80×15
<a href="https://agentmods.dev/commands/robofinsystems/robosystems/create-pr"><img src="https://agentmods.dev/badge/commands/robofinsystems/robosystems/create-pr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 18 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,588 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00018 $0.02588
Opus 5.5 $0.00007 $0.01035
Sonnet 5.5 $0.00004 $0.00518
Haiku 4.5 $0.00002 $0.00259

Measured 1mo ago against content hash db10b2b5e4e1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

create-pr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/commands/create-pr.md · 122 lines

How it starts

The opening of the file, as written. The whole thing — 122 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Create a GitHub pull request for the current branch, writing the title and description from the actual work done in this session — not reconstructed from the diff.

Why this command exists

The previous flow outsourced PR-description authoring to a GitHub Action that only saw the diff and commit messages. It could not know why the changes were made, so it frequently described things that weren't true. Those inaccurate descriptions then fed @claude reviews, compounding the bad information. This command fixes that at the root: you author the description here, where the full context of what was done and why is available.

This is a Python backend service (FastAPI + LadybugDB graphs, managed with uv and just). Ground every description in the actual code that changed, and stay mindful of multi-tenancy (graph operations scoped to graph_id).

This repository is public. The PR title and body are world-readable the moment they're pushed — routinely before the change is deployed, since deploys are manual. Treat the description as a publication, not a work note.

Instructions

1. Preflight

Run these checks before touching anything:

# Current and target branches
CURRENT=$(git branch --show-current)
TARGET=${1:-main}            # override target via the first argument
  • Never PR from the default branch. If CURRENT is main (or master/staging), stop and tell the user to switch to a feature branch first.
  • Source ≠ target. If CURRENT == TARGET, stop.
  • Uncommitted changes. Run git status --porcelain. If there are uncommitted/staged changes, surface them and ask whether to commit them (respecting the repo's commit rules — never on main, stage files by name, no git add -A) or proceed without them. The PR description must reflect committed state.
  • Existing PR. Check gh pr list --head "$CURRENT" --base "$TARGET" --json url,number. If a PR already exists, do not create a duplicate — offer to update its title/body with gh pr edit instead.
  • Security fixes — check deployment first. A security-fix commit discloses the bug through its diff the moment it's pushed. If this branch carries one, check whether the vulnerable code is still live in production (git show <prod-tag>:<file> against the fix) and tell the user, so they can sequence the deploy with — or ahead of — the public push rather than opening a window.
  • Push the branch. gh pr create requires the branch on the remote. Ensure it's pushed: git push -u origin "$CURRENT" (the user invoking /create-pr is the explicit, in-the-moment request that authorizes pushing this feature branch — this is the one push allowed without a separate ask; never push main).

Read the full file on GitHub · 122 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +1 lines db10b2b5e4e1
  2. 1mo ago First seen · 121 lines · 18 tokens per session scan A 7c3a71f8bf99

Subscribe to this mod's changes

create-pr is a command published in the GitHub repository RoboFinSystems/robosystems (29 stars, last pushed today), licensed Apache-2.0. It adds 18 tokens to every session and 2,588 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.