Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/jackchuka/ghpm/ghpm-worknpx skills add jackchuka/ghpm --skill ghpm-workgit clone --depth 1 https://github.com/jackchuka/ghpmWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jackchuka/ghpm/ghpm-work)<a href="https://agentmods.dev/skills/jackchuka/ghpm/ghpm-work"><img src="https://agentmods.dev/badge/skills/jackchuka/ghpm/ghpm-work.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00052 | $0.00853 |
| Opus 5 | $0.00026 | $0.00426 |
| Sonnet 5 | $0.00010 | $0.00171 |
| Haiku 4.5 | $0.00005 | $0.00085 |
Grade A, and why
ghpm-work scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ghpm-work
PREREQUISITE: Read
../ghpm-shared/SKILL.mdfor prerequisites and error handling.
End-to-end workflow for a GitHub Project item. /ghpm-work <issue-number> drives the full lifecycle.
If no argument, ask for the issue number.
Flow
Setup → Clarify → Plan → Implementation Plan → Implement → Draft PR
↕ decisions captured at every phase ↕
| Phase | Reference | What happens |
|---|---|---|
| 1. Setup | references/setup.md |
Resolve item, assign, branch, status sync, write session |
| 2. Clarify | references/clarify.md |
Evaluate issue clarity, flesh out if needed, gather context |
| 3. Plan | references/plan.md |
Explore codebase, draft approach, post as issue comment |
| 4. Impl Plan | references/implementation-plan.md |
Concrete steps, files, tests — post as issue comment |
| 5. Implement | references/implement.md |
Execute plan, write code, commit, verify |
| 6. Draft PR | references/draft-pr.md |
Create draft PR with summary |
Decisions: See references/decisions.md. Capture at ANY phase — not just coding. Watch every interaction for choices worth recording.
Wrap up: See references/wrap-up.md. Triggered by "wrap up" or "done".
Session Resume
Sessions track phase in .ghpm/sessions/<number>.json (schema in ../ghpm-shared/references/session.md).
Each phase writes its phase value to the session file on entry, before doing any work. This means on resume, re-run the recorded phase (it may have been interrupted):
phase |
Resume from |
|---|---|
missing/setup |
Clarify (setup completed, phase field not yet added) |
clarify |
Clarify |
plan |
Plan |
implementation_plan |
Implementation Plan |
implement |
Implement |
pr |
Draft PR |
done |
Session complete — inform user and stop |
On resume, briefly show what's already done before continuing.
Prompt Configuration
Per ../ghpm-shared/references/prompts.md. This skill's config lives at prompts.ghpm-work in .ghpm/config.json.
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 80 lines · 52 tokens per session scan A 72f60b66f151
ghpm-work is a skill published in the GitHub repository jackchuka/ghpm (20 stars, last pushed 4mo ago), licensed MIT. It adds 52 tokens to every session and 853 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
trending-repos-discovery
Discover and analyze trending GitHub repositories from TrendShift and other sources — evaluate usefulness, extract learnings, and identify valuable skills/tools.
git-pr-create
Open a GitHub pull request for the current branch using gh — conventional title, repo-template-aware body, auto-derived labels, push if needed. ALWAYS invoke this skill for ANY PR-creation request, no matter how short or casual. Trigger on every phrasing: "create a PR", "open a PR", "make a PR", "raise a PR", "PR…
github-actions-trigger
Trigger GitHub Actions workflows from Claude Code. Auto-run tests, deploy, or validate when skills like run-pre-commit-checks complete.
github-vesting
GitHub-gated token vesting on proofofdev.xyz — lock ANY ERC-20 on Base via API at api.proofofdev.xyz, link GitHub, repo claims. Use for github vesting, lock tokens, vesting progress, link github, proofofdev. NEVER use github-vesting.vercel.app for API.
ai-analyzer
AI驱动的综合健康分析系统，整合多维度健康数据、识别异常模式、预测健康风险、提供个性化建议。支持智能问答和AI健康报告生成。.
ai-engineering-toolkit
6 production-ready AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, an.