Borrowing it
Nothing to install: this file belongs to mmnto-ai/totem. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/mmnto-ai/totem/main/.claude/skills/postmerge/SKILL.mdgit clone --depth 1 https://github.com/mmnto-ai/totemWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mmnto-ai/totem/postmerge)<a href="https://agentmods.dev/skills/mmnto-ai/totem/postmerge"><img src="https://agentmods.dev/badge/skills/mmnto-ai/totem/postmerge/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mmnto-ai/totem/postmerge"><img src="https://agentmods.dev/badge/skills/mmnto-ai/totem/postmerge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.01425 |
| Opus 5.5 | $0.00008 | $0.00570 |
| Sonnet 5.5 | $0.00004 | $0.00285 |
| Haiku 4.5 | $0.00002 | $0.00143 |
Grade A, and why
postmerge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.
totem wrap is retired pending mmnto-ai/totem#1361 (it silently
overwrites hand-crafted committed docs via the totem docs step).
Run the post-merge steps directly instead.
After merging PRs, run the following sequence. Replace $ARGUMENTS
with the merged PR numbers (space-separated, e.g. 1345 1347 1348).
-
Extract lessons from the merged PR(s):
pnpm exec totem lesson extract $ARGUMENTS --yes -
Sync the semantic index (usually already handled by the post-merge git hook, but running it explicitly is cheap and safe):
pnpm exec totem sync -
Compile new rules locally and export to AI tool configs. Do NOT pass
--cloud; the cloud worker is Gemini-only (migration to Claude declined — mmnto-ai/totem#1221, closed not-planned). Local compile routes to theorchestrator.overrides.compilerole intotem.config.ts(currently Claude Sonnet 5):pnpm exec totem lesson compile --export -
Review the newly compiled rules. Step 3's output prints a count like
N/M (100%) ... X compiled, Y skipped, Z failed. For each of the X newly compiled rules, inspect them in.totem/compiled-rules.jsonand verify:- The
astGrepPatternorpatternis not over-broad (does it fire on legitimate code the rule is not trying to flag?) - The pattern does not reference hallucinated package names, type names, or file paths that do not exist in the repo
- The
lessonHeadingaccurately describes the rule's behavior
For any rule that fails these checks, archive it with the atomic
totem lesson archive <hash> --reason "<specific failure mode>"command (mmnto-ai/totem#1587). The command flips the rule'sstatustoarchived, stampsarchivedAton first transition, refreshescompile-manifest.json'soutput_hash, and regenerates the copilot and junie exports so the archived rule stops flowing into downstream AI tool configs — all in one invocation.pnpm exec totem lesson archive 8dbddb67 --reason "Pattern fires on every throw-in-catch; lesson's real scope is post-scaffold hooks only"Use as many characters of the hash as needed to unambiguously match one rule. The command matches on
lessonHashprefix; ambiguous prefixes print the candidates and exit non-zero with no mutation. Idempotent on rerun —archivedReasonrefreshes,archivedAtis preserved. The mmnto-ai/totem#1345 archive filter inloadCompiledRulessilences archived rules at lint time while preserving them in the ledger for future compile-worker prompt regression analysis.Do NOT use
git checkout HEAD -- .totem/compiled-rules.jsonto revert the entire rules file. Reverting rules while keeping the new lessons on disk creates a manifest inconsistency (manifest.input_hash reflects the new lessons, output_hash reflects the reverted rules, verify-manifest fails on push). This is the symmetric counterpart of the mmnto-ai/totem#1337 bug. Archive-in-place viatotem lesson archiveis the intended curation surface; reverting is not.Empirical baseline: approximately 2 of every 6 auto-compiled rules are bad (1.14.1 postmerge), and the 2026-04-11 PM postmerge hit 4 of 5. The compile-worker prompt rewrite conversation lives under Strategy #73 and Strategy #62. Every archivedReason is feedback that informs that rewrite.
- The
-
Format everything compile and archive touched:
pnpm run format -
Stage only the artifacts we keep: new lessons, the mutated rules file, the refreshed manifest, and the regenerated exports. Do NOT stage
docs/wiki/roadmap.mdordocs/reference/architecture.mdunless you hand-edited them deliberately (those aretotem docstargets and a postmerge run should not rewrite them):git add .totem/lessons/ .totem/compiled-rules.json .totem/compile-manifest.json .github/copilot-instructions.md .junie/skills/totem-rules/rules.md -
Commit:
git commit -m "chore: totem postmerge lessons for $ARGUMENTS"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 113 lines · 21 tokens per session scan A 0520f53c87db
postmerge is a skill published in the GitHub repository mmnto-ai/totem (18 stars, last pushed today), licensed Apache-2.0. It adds 21 tokens to every session and 1,425 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
hunk-launch-video
Produces Hunk videos by driving the real TUI headlessly in a PTY, compositing captioned 1080p frames in Chromium, and encoding with ffmpeg. Use for feature demos, workflow explainers, announcements, launch videos, and full-release roundups.
pull-request-automation
Audits and improves the pull request workflow for a GitHub repository. Covers PR description templates, auto-labelling, CODEOWNERS, PR size checks, and branch protection rules. Invoked when the user asks to improve the PR process, set up PR automation, or add a PR template.
autofix-pr
Watch a pull request and fix it from a worktree of its own - CI failures, review feedback from trusted authors and merge conflicts are fixed, pushed to the PR branch and answered on the PR under the user's git and gh identity. Usage - /autofix-pr [ | ] [--once] [--every ] [--no-reply] [--yes] [instructions]…
gh-find-prs
Survey open Codewhale PRs and triage each for mergeability and disposition against the real landing branch.
hunk-release
Prepares, publishes, verifies, and curates Hunk releases. Use for release metadata, benchmarks, tags, publishing, release videos, backports, or recovery.
git
Git and code hosting platform management — GitHub, GitLab, Codeberg, Forgejo. Zero barrier — install x-cmd and manage repos from the terminal. Use for "git", "github", "gitlab", "repo", "pull request", "code hosting".