Borrowing it
Nothing to install: this file belongs to jepegit/issue-flow. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/jepegit/issue-flow/main/.cursor/skills/iflow-cleanup/SKILL.mdgit clone --depth 1 https://github.com/jepegit/issue-flowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jepegit/issue-flow/iflow-cleanup)<a href="https://agentmods.dev/skills/jepegit/issue-flow/iflow-cleanup"><img src="https://agentmods.dev/badge/skills/jepegit/issue-flow/iflow-cleanup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jepegit/issue-flow/iflow-cleanup"><img src="https://agentmods.dev/badge/skills/jepegit/issue-flow/iflow-cleanup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00078 | $0.02555 |
| Opus 5.5 | $0.00031 | $0.01022 |
| Sonnet 5.5 | $0.00016 | $0.00511 |
| Haiku 4.5 | $0.00008 | $0.00255 |
Grade A, and why
iflow-cleanup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.
issue-flow — cleanup (/iflow-cleanup)
Post-merge branch hygiene after a PR has landed.
Invoke: type iflow cleanup in chat, or /iflow-cleanup from the slash menu (iflow-cleanup also works).
MODEL & EXECUTION DIRECTIVE
Profile: economy — Prioritize speed and token economy over deep reasoning.
In Cursor: use Auto or a fast model before invoking this step.
Keep scope tight to what this step requires.
Resolve the project root first
Before any git, gh, or .issueflows/ operation, settle <project_root> and <owner/repo>, stopping at the first unambiguous answer: explicit root:<path> / repo:<name> hints; issue-flow agent resolve [--json]; the one workspace repo on a ^\d+- branch; the one .issueflows/ scaffold in view; the issueflow-workspace.toml default (say you used it). Still ambiguous → stop and ask. Then use git -C <project_root> (or issue-flow agent … -C <project_root>) and pass --repo <owner/repo> to every gh call (gh repo view takes the repo positionally).
Input
| Trailing text | Effect |
|---|---|
| nothing | Phase A: the current branch's PR plus every other local branch already landed on the default. |
| a branch name | Phase A targets that branch instead of the current one. |
include github / with github / github |
Also run Phase B, the remote audit (github.md). no github / local only skips it. |
self-update / bleeding edge |
Upgrade the tool after a successful pull. skip self-update / no bleeding skips it. |
ask a1 / ask a2 |
Force that phase's prompt even when its cleanup_yes_* knob is on. |
drive / landed |
Orchestrator token from /iflow-run drive: its earlier confirm already covered -D on landed branches, so A1/A2 run without re-asking. A2 narrows to squash_landed, plus merged_pr_divergent with no commit newer than the PR's mergedAt; never unique_work / skipped. A human never passes it. |
all / workspace |
Every scaffolded workspace member (step 4b, workspace.md). At most three confirms in total (A1, A2, Phase B). |
prs |
Refresh open PRs that went DIRTY after another merge: read prs.md instead of the steps below. |
archive |
Condense old solved issue groups: read archive.md instead of the steps below. |
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · -75 lines · +12 tokens per session 769eb4a217cd
- 1mo ago Changed · +36 lines 4afdca92f9d1
- 1mo ago Changed 425c251d4841
- 1mo ago Changed · +1 lines dde01cd4a6af
- 1mo ago Changed · +15 lines cdaefc6b6a83
- 1mo ago Changed · +1 lines 02633bbf298f
- 1mo ago Changed · +20 lines · +14 tokens per session 61f704f32740
- 1mo ago Changed · +4 lines · +7 tokens per session 617bb2da8760
- 2mo ago First seen · 104 lines · 45 tokens per session scan A 207d4556156b
iflow-cleanup is a skill published in the GitHub repository jepegit/issue-flow (4 stars, last pushed 8d ago), licensed MIT. It adds 78 tokens to every session and 2,555 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
merge-batch
Prepare and merge an owner-selected PR batch with contributor credit and exact-candidate admission. Use for a pasted PR list; combined focused validation is diagnostic, and every actual landing still requires its applicable checks and authorization.
prowler-commit
Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.
gh-auth-isolation
Safely manage multiple GitHub identities (EMU + personal) in agent workflows.
comet-github
A routing guide for Comet-related GitHub work. It directs requests about pull requests, issues, CI failures, ideas, and fixes to the appropriate review or implementation process.
github-skill
Work with GitHub via the gh CLI — clone repositories, create/list/merge pull requests, create/list issues, and run any other gh command (API calls, workflow runs, releases, repo administration). List operations return parsed JSON.
release-helper
Ensures configuration and code changes are released correctly. Use PROACTIVELY whenever you edit config.json, change any setting, or fix a configuration bug in this project, so the change reaches production.