auto

auto is a command for coding agents from sangrokjung/claude-forge. It costs 20 tokens per session (3,351 once invoked), scanned A, original, MIT.

An automated coding workflow runs a software task from planning through code changes, checks, and a pull request. A pull request is a proposed change for review before it is merged into the main codebase.

In plain words
What is it for?
It helps carry out feature work, bug fixes, and refactoring by checking the environment, writing tests first, reviewing and simplifying code, scanning for security issues, updating documentation, and creating a pull request.
Why use it?
It removes the need to start each development step manually and can continue through routine issues without waiting for approval, stopping for critical security problems.

Command

Part of the claude-forge plugin — 33 skills, 39 commands, 17 agents shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/sangrokjung/claude-forge/auto
Clone the repo
git clone --depth 1 https://github.com/sangrokjung/claude-forge

Or install claude-forge, the plugin that ships this one along with the rest of its 33 skills, 39 commands, 17 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for auto

README.md
[![agentmods](https://agentmods.dev/badge/commands/sangrokjung/claude-forge/auto.svg)](https://agentmods.dev/commands/sangrokjung/claude-forge/auto)
Your own site
<a href="https://agentmods.dev/commands/sangrokjung/claude-forge/auto"><img src="https://agentmods.dev/badge/commands/sangrokjung/claude-forge/auto.svg" alt="Measured on agentmods" height="20"></a>
Per session 20 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 3,351 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00020 $0.03351
Opus 5 $0.00010 $0.01675
Sonnet 5 $0.00004 $0.00670
Haiku 4.5 $0.00002 $0.00335

Measured 6d ago against content hash a50836246896, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

auto scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

allowed-tools: Bash(git:*), Bash(npm:*), Bash(pnpm:*), Bash(npx:*), Bash(go:*), Bash(cargo:*), Bash(make:*), Bash(python:*), Bash(curl:*), Read, Write, Edit, Glob, Grep, Task, Skill(sync-docs), Skill(commit-push-pr), Ski
commands/auto.md · 280 lines

How it starts

The opening of the file, as written. The whole thing — 280 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/auto - 원스톱 자동 워크플로우 (v7)

개별 커맨드를 하나씩 호출하는 대신, 전체 파이프라인을 한 번에 자동 실행합니다. CRITICAL 보안 이슈에서만 중단하며, 그 외에는 끝까지 진행합니다.


0단계: 인자 파싱

$ARGUMENTS에서 옵션을 추출한다:

인자 기본값 설명
--mode feature 실행 모드: feature / bugfix / refactor
--no-notify false Moshi 알림 비활성화
--no-branch false 브랜치 자동 생성 비활성화
--no-security false security-scan 단계 스킵
--autonomous false plan.md 자율 승인 + 방향 확인 자동 처리. 5줄+ 구체적 브리프 권장. Security ≥ 4 필수, CRITICAL 시 즉시 중단
나머지 텍스트 - 작업 설명 (필수)

작업 설명이 없으면 에러를 출력하고 종료한다:

사용법: /auto [작업 설명] [옵션]

예시:
  /auto 로그인 페이지 만들기
  /auto --mode bugfix 결제 금액이 0원으로 표시되는 버그
  /auto --mode refactor 인증 모듈 정리
  /auto 결제 기능 추가 --no-notify

1단계: 모드별 파이프라인 결정

feature 모드 (기본)

env-check -> plan -> tdd -> code-review -> simplify -> security-scan -> handoff-verify -> sync-docs -> commit-push-pr --merge -> notify
  1. env-check: 브랜치 확인. main/master면 feature 브랜치 자동 생성.
  2. plan: 구현 계획 수립. 사용자 확인 없이 자동 확정.
  3. tdd: 테스트 먼저 작성 후 구현. RED -> GREEN -> IMPROVE 사이클.
  4. code-review: 작성한 코드의 보안 + 품질 검사. CRITICAL/HIGH 이슈는 자동 수정.
  5. simplify (v8 신설, 2026-04-17): /simplify 스킬 실행. code-review 후 정돈된 코드에서 중복·과도한 추상화·불필요한 코드를 제거. 실패 시 --skip-simplify 폴백으로 자동 넘어감(파이프라인 중단 아님). 참조: ~/qjc-office/dotclaude/plans/zesty-stirring-stream.md §3·§6.
  6. security-scan: security-reviewer 에이전트로 OWASP Top 10 스캔. simplify 후 재검증하여 단순화로 인한 보안 이슈 없는지 확인. CRITICAL 발견 시 자동 수정 시도.
  7. handoff-verify: 빌드/테스트/린트 자동 검증. 실패 시 3단계 에스컬레이션 (자동 수정 → Opus 에이전트 → Telegram Hard Block).
  8. sync-docs: 문서 동기화 (prompt_plan.md, spec.md, CLAUDE.md + rules/). 머지 전 의무 게이트 (CRITICAL) — Skill 도구로 실제 /sync-docs 스킬을 실행한다 (인라인 요약 대체 금지). 실패 시 머지 진행 금지.
  9. commit-push-pr --merge: 커밋 메시지 자동 생성, 푸시, PR 생성, 자동 머지 (feature branch에서만). v7부터 sync-docs 게이트 내장 — 8단계가 이미 실행됐으면 중복 실행 없이 통과.
  10. notify: Moshi webhook + Telegram으로 완료/실패 알림 발송.

simplify 폴백 규칙: /simplify 스킬 실행 중 3개 이상 파일에서 린트/타입 에러 발생 시, 변경 롤백 후 skip-simplify 플래그로 다음 단계 진행. pipeline-metrics.jsonlsimplify_skipped=true로 기록. 2주간 실패율 > 10% 시 opt-in 방식으로 롤백 검토.

Read the full file on GitHub · 280 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 280 lines · 20 tokens per session scan A a50836246896

Subscribe to this mod's changes

auto is a command published in the GitHub repository sangrokjung/claude-forge (825 stars, last pushed 2d ago), licensed MIT. It adds 20 tokens to every session and 3,351 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.