pr-lifecycle

A step-by-step skill for taking a GitHub issue through implementation, review, pull-request checks, and merging in the Squad repository.

In plain words
What is it for?
Use it when picking up an issue, creating a branch, running build and test checks, opening or updating a pull request, and preparing it for merge.
Why use it?
It organizes the full change process and lists the checks needed before a pull request is merged.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/bradygaster/squad/pr-lifecycle
Any agent
npx skills add bradygaster/squad --skill pr-lifecycle
Clone the repo
git clone --depth 1 https://github.com/bradygaster/squad

Made for: Claude Code, Codex.

Per session 14 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,030 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00014 $0.05030
Opus 5 $0.00007 $0.02515
Sonnet 5 $0.00003 $0.01006
Haiku 4.5 $0.00001 $0.00503

Measured 3d ago against content hash 5c7565dd855f, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

pr-lifecycle scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.copilot/skills/pr-lifecycle/SKILL.md · 538 lines

How it starts

The opening of the file, as written. The whole thing — 538 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Context

This skill is the canonical Copilot-agent lifecycle for the Squad repository. It covers the full path from picking up a GitHub issue to merging a PR. Where older docs (templates, copilot-instructions, CONTRIBUTING.md) conflict with this skill, this skill takes precedence for Copilot agents.

For advanced scenarios (worktrees, multi-repo coordination), see .copilot/skills/git-workflow/SKILL.md.

Scope

THIS SKILL COVERS:

  • Issue pickup and branch creation
  • Implementation, build, test, lint workflow
  • Pre-push safety verification
  • PR creation with correct target, title, body, and labels
  • All 11 PR readiness checks (what they check, how to pass, how to fix)
  • Post-creation maintenance (review feedback, rebasing, CI)
  • Merge preconditions and cleanup

THIS SKILL DOES NOT COVER:

  • Worktree-based parallel work (see git-workflow skill)
  • Multi-repo coordinated PRs (see git-workflow skill)
  • Release process / publishing (see .squad/skills/release-process)
  • Reviewer lockout protocol (see .copilot/skills/reviewer-protocol)
  • Architectural or security review checklists

Lifecycle Procedure

Phase 1 — Issue Pickup

  1. Read the issue. Understand the acceptance criteria before writing code.

  2. Confirm capability fit. Check your capability profile in .squad/team.md. 🟢 = proceed. 🟡 = proceed but flag in PR. 🔴 = comment on issue and stop.

  3. Branch from dev:

    git fetch origin dev
    git checkout dev
    git rebase origin/dev
    git checkout -b squad/{issue-number}-{slug}
    
    • Branch name format: squad/{issue-number}-{kebab-case-slug}
    • Example: squad/42-fix-login-validation
    • Never branch from main
  4. Mark in-progress (optional):

    gh issue edit {number} --add-label "status:in-progress"
    

Phase 2 — Implementation

  1. Make your changes. Follow the codebase conventions:
    • TypeScript strict mode, no @ts-ignore
    • ESM-only, async/await
    • JSDoc on new public APIs

Read the full file on GitHub · 538 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 538 lines · 14 tokens per session scan A 5c7565dd855f

Subscribe to this mod's changes

pr-lifecycle is a skill published in the GitHub repository bradygaster/squad (3,150 stars, last pushed today), licensed MIT. It adds 14 tokens to every session and 5,030 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.