warren: Skill for Claude Code

.agents/skills/good-first-issue-batch/SKILL.md

good-first-issue-batch is a skill for Claude Code, Codex from jayminwest/warren. It costs 80 tokens per session (2,249 once invoked), scanned A, original, MIT.

A workflow for turning a backlog of proposed GitHub issues into verified, contributor-ready issues. Each candidate is checked against the current code before it is published.

In plain words
What is it for?
Use it to recheck backlog entries, confirm defects at the latest revision, write accurate issue descriptions, and publish batches of beginner-friendly GitHub tasks.
Why use it?
It prevents filing issues that have already been fixed, are only partly valid, or no longer describe the current code.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: reads .claude/ paths; mentions subagents; installed under .agents/ (shared by several agents).

This is jayminwest/warren's own configuration. It tells Claude Code and Codex how to work on warren itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything warren configures →

Reuse

Borrowing it

Nothing to install: this file belongs to jayminwest/warren. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/jayminwest/warren/main/.agents/skills/good-first-issue-batch/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/jayminwest/warren

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for good-first-issue-batch

README.md
[![agentmods](https://agentmods.dev/badge/skills/jayminwest/warren/good-first-issue-batch/github.svg)](https://agentmods.dev/skills/jayminwest/warren/good-first-issue-batch)
Your own site
<a href="https://agentmods.dev/skills/jayminwest/warren/good-first-issue-batch"><img src="https://agentmods.dev/badge/skills/jayminwest/warren/good-first-issue-batch/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for good-first-issue-batch

Your own site · 80×15
<a href="https://agentmods.dev/skills/jayminwest/warren/good-first-issue-batch"><img src="https://agentmods.dev/badge/skills/jayminwest/warren/good-first-issue-batch.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 80 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,249 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Agent Snooping · line 168
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00080 $0.02249
Opus 5.5 $0.00032 $0.00900
Sonnet 5.5 $0.00016 $0.00450
Haiku 4.5 $0.00008 $0.00225

Measured 2mo ago against content hash c5d8ad9a8321, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

good-first-issue-batch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/good-first-issue-batch/SKILL.md · 208 lines

How it starts

The opening of the file, as written. The whole thing — 208 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Protocol: Good-First-Issue Batch

You turn seeds backlog rows into GitHub issues a stranger can actually pick up. The hard part is not writing them. It is proving they are still real.

The failure this skill exists to prevent

On 2026-08-07 six issues were bulk-filed straight from seeds rows. Within four hours a contributor commented on #808 that the work was already merged — it had been fixed in PR #774 four days before the issue was filed. Two more issues in the same batch (#806, #807) turned out to be half-dead. Nobody noticed because the seeds rows still said open, and the seeds rows still said open because the PRs that killed them were about something else entirely.

A tracker row is a lead, not evidence. Its age, its open status, and its description are all things a human wrote once and never revisited. The only evidence that a bug is real is the bug, in the code, at HEAD, today.

1. Operating principles

  • Re-derive every claim from HEAD. Never copy a defect description from the seeds row into the GitHub body. Open the file, confirm the defect, and write the body from what you just read.
  • Verify bullets independently. A three-bullet issue is three issues wearing a trenchcoat. One bullet dying does not kill the others, and one bullet surviving does not vindicate the rest. Grade each separately.
  • Line numbers are always stale. Every file:line in an old row has drifted. Re-resolve all of them; cite what you actually saw.
  • A dead issue costs more than no issue. A contributor who burns an evening on already-merged work may not come back. When verification is ambiguous, leave the row in seeds rather than publishing a maybe.
  • Never file for volume. Six solid issues beat twenty speculative ones. There is no quota.

2. Gather candidates

Pull open seeds rows that are plausibly contributor-sized and self-contained:

sd list --status open --format compact
sd search "<theme>" --format compact

Good raw candidates are bounded in blast radius, need no cluster access or live credentials to reproduce, and have an obvious done condition. Drop anything needing a running k8s deployment, a GitHub App token, or judgement about product direction.

Read the full file on GitHub · 208 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 208 lines · 80 tokens per session scan A c5d8ad9a8321

Subscribe to this mod's changes

good-first-issue-batch is a skill published in the GitHub repository jayminwest/warren (513 stars, last pushed 7d ago), licensed MIT. It adds 80 tokens to every session and 2,249 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

good-first-issue-batch compared with skills from other repositories

good-first-issue-batch next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
good-first-issue-batchjayminwest/warrenSkill5137d agoMITA80Claude Code, Codex
factory-handoffwatt-mind/factorySkill181mo agoApache-2.0A47Claude Code
release-announcementpaperclipai/paperclipSkill111kyesterdayMITA42Claude Code, Codex
github-pr-workflowpaperclipai/paperclipSkill111kyesterdayMITA39Claude Code, Codex
commitJotJunior/cstkSkill24yesterdayMITA51Claude Code
ticket-specwatt-mind/factorySkill181mo agoApache-2.0A45Claude Code
git-pr-strategyvmobifystudio/app-dev-teamSkill54d agoMITA26Claude Code