GocciaScript: Skill for Claude Code

.agents/skills/update-pr/SKILL.md

update-pr is a skill for Claude Code, Codex from frostney/GocciaScript. It costs 52 tokens per session (1,300 once invoked), scanned A, original, MIT.

A workflow for updating an existing pull request, which is a proposed code change submitted for review.

In plain words
What is it for?
Use it to run the project's checks, commit relevant changes, merge an updated base when needed, push the branch, and refresh pull-request metadata.
Why use it?
It keeps the branch, commits, checks, pull-request details, and remote base branch aligned while limiting changes to the relevant work.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is frostney/GocciaScript's own configuration. It tells Claude Code and Codex how to work on GocciaScript itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything GocciaScript configures →

Reuse

Borrowing it

Nothing to install: this file belongs to frostney/GocciaScript. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/frostney/GocciaScript/main/.agents/skills/update-pr/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/frostney/GocciaScript

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for update-pr

README.md
[![agentmods](https://agentmods.dev/badge/skills/frostney/gocciascript/update-pr/github.svg)](https://agentmods.dev/skills/frostney/gocciascript/update-pr)
Your own site
<a href="https://agentmods.dev/skills/frostney/gocciascript/update-pr"><img src="https://agentmods.dev/badge/skills/frostney/gocciascript/update-pr/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for update-pr

Your own site · 80×15
<a href="https://agentmods.dev/skills/frostney/gocciascript/update-pr"><img src="https://agentmods.dev/badge/skills/frostney/gocciascript/update-pr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 52 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,300 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00052 $0.01300
Opus 5.5 $0.00021 $0.00520
Sonnet 5.5 $0.00010 $0.00260
Haiku 4.5 $0.00005 $0.00130

Measured yesterday against content hash 6fcc7382a755, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

update-pr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/update-pr/SKILL.md · 97 lines

How it starts

The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Update PR

Update the established PR through integration, relevant commits, a normal push and current metadata. The request includes resolving routine conflicts and running the declared PR gate; merging belongs to /deliver under the delivery settings. Reuse the selected target and prior authorization. Ask only when the intended PR, a material conflict-resolution choice or another material choice within this update remains unclear.

When the current PR belongs to a native GitHub stack, read ../git-workflow/references/github-stacks.md. When PR media no longer shows the current behavior, or the change needs new media, refresh the affected parts using ../create-pr/references/walkthroughs.md; reuse media that still shows the current behavior. Media tooling gaps alone do not block the update.

  1. Apply git-workflow. Inspect the current PR and its base branch, the branch, relevant local changes, recent commits and the fetched remote base as git-workflow defines it. Resolve a branch that needs the base under step 3 before deciding whether missing CI needs any action.
  2. Stop if on the base branch or no open PR exists; report the required next workflow. Stop likewise when git-workflow gives the PR no remote base.
  3. Merge the remote base into an ordinary branch only when git-workflow's up-to-date rule calls for it. A branch that is behind keeps its head and its checks, including when this update commits new changes. Preserve both sides' required behavior in additive conflicts; regenerate generated files using the project's tool. Continue through validation when the resolution is established. For a verified native stack, capture remote heads and use the guarded gh stack sync or narrower official stack operation; never use raw rebase or force-push commands.
  4. Apply /code-review fix-all and /test-against-spec fix to the changed behavior, including any baseline integration. Reuse only evidence whose content, command, environment and coverage still match; a baseline merge or edit invalidates the checks it affects. Run missing or invalidated checks. Repair every verified in-scope requirement gap through /implement's development loop, then establish the declared PR gate. A preview needed to test an unpublished fix permits its draft update; resume testing on that exact revision before claiming readiness.
  5. When relevant changes exist, commit them under git-workflow: stage only those files, use a concise Conventional Commit subject, and never amend or skip hooks. Run the publication guard at each commit, push and PR write.
  6. When the branch has commits its remote lacks, push an ordinary branch normally, setting upstream when needed. Push a verified stack only through the guarded official stack workflow.
  7. Reconcile the PR title and body with the complete current diff, scope and linked issues. A push always changes the head, so after a push reconcile the body again even when the summary still holds. Keep the title a Conventional Commit subject for the whole change; it becomes the squash-merge commit subject, so widened scope may also change its type. Follow ../agent-writing/references/pr-descriptions.md, preserving explicit project-template requirements and replacing obsolete summaries, intermediate development history and author verification sections. Keep the review note at the end of the body, updated as it describes. Keep every PR template heading verbatim and in order, and under a heading with nothing to say write a one-line None or the reason. Run template-check on the draft with --kind pr --body FILE before writing it and on the live body with --pr N after, and fix every heading problem it reports.
  8. Report the updated PR, any new commit, metadata changes, what the publication guard rewrote and observed validation. Include stack position and rewritten branches when applicable. Distinguish passed local checks from pending current-head CI. A draft PR stays draft until delivery-wait observes every required check green on the pushed head; only then may it be marked ready for review. Return the exact current head and next transition to the active publication or delivery caller; that caller continues through CI and feedback. Started directly, continue under the delivery settings; with entry-points: deliver, the pushed head goes on to /deliver, which awaits its CI and review and takes the PR to the configured endpoint (ready-to-merge when there is no ORCHESTRATION.md). With stop, end with this report. Report missing walkthrough requirements with remedies.

Read the full file on GitHub · 97 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · +18 lines 6fcc7382a755
  2. 11d ago Changed · +4 lines 2c10f7a01936
  3. 22d ago Changed · +7 lines bffad8febc44
  4. 26d ago Changed · +6 lines · +7 tokens per session 289cd40b1837
  5. 29d ago Changed · +19 lines b6698c0f8159
  6. 1mo ago First seen · 43 lines · 45 tokens per session scan A 744821922f34

Subscribe to this mod's changes

update-pr is a skill published in the GitHub repository frostney/GocciaScript (20 stars, last pushed yesterday), licensed MIT. It adds 52 tokens to every session and 1,300 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

git-step-commit

Analyze Git changes, split them into coherent commits, infer message language and format, optionally close supplied GitHub issues, and execute safely. Manage persistent global or repository preferences for review versus direct submission and automatic or specified commit-message language through native Git config.…

bosens-China/tc39-atlas · 134 tokens

publish-npm-packages

Configure, audit, or migrate npm package publishing to current secure practices. Use when Codex needs to publish or prepare an npm package, fill npm Trusted Publisher settings, create a GitHub Actions/GitLab/CircleCI release workflow, adopt OIDC, replace npm tokens, publish organization-scoped public or private…

bosens-China/tc39-atlas · 84 tokens

create-pr

Creates a GitHub PR with a Linear-ticket-prefixed title and a decision-led, narrative description for Prisma 8. Use when the user wants to create a pull request, open a PR, or submit changes for review.

prisma/orm · 48 tokens

draft-release-notes

Author the committed release-notes file for a Prisma 8 release (stable or 8.0.0-rc.N) by enumerating the merged PRs since the previous release v tag (stable or -rc.N), resolving opaque TML-NNNN: titles via Linear context (never copied verbatim), triaging public-worthiness, and writing categorized notes — breaking…

prisma/orm · 174 tokens

publish-npm-version

Cuts the next release of Prisma 8: bumps the root package.json version (on the v8 RC line: 8.0.0-rc.N → rc.N+1), propagates it to every workspace package, and opens a PR titled "chore(release): bump to ". When the maintainer merges the PR, the Publish to npm workflow runs automatically and ships the new version to npm…

prisma/orm · 182 tokens

triage-contributor-pr

Triage open pull requests from external contributors to prisma/orm and produce a per-PR verdict with evidence. Use when a maintainer asks to triage, evaluate, assess, or review the queue of incoming contributor PRs, to decide whether a fork PR is safe to run CI on, to check whether a PR is in scope for its version…

prisma/orm · 131 tokens