implement-batch

A batch workflow for implementing several GitHub issues on one branch and combining the work into one commit and pull request. A pull request is a proposed change for review before merging into a repository.

In plain words
What is it for?
Implementing the sub-issues of an epic or a chosen list of GitHub issues in the okfmem repository, with verification and one final pull request.
Why use it?
It keeps each issue's investigation separate, then runs a review pass over the combined changes instead of requiring one long, crowded agent session.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/s-annam/okfmem/implement-batch
Any agent
npx skills add s-annam/okfmem --skill implement-batch
Clone the repo
git clone --depth 1 https://github.com/s-annam/okfmem

Made for: Claude Code, Codex.

Per session 92 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 7,370 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00092 $0.07370
Opus 5 $0.00046 $0.03685
Sonnet 5 $0.00018 $0.01474
Haiku 4.5 $0.00009 $0.00737

Measured 2d ago against content hash 4fa08aee0cb1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

implement-batch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/implement-batch/SKILL.md · 449 lines

How it starts

The opening of the file, as written. The whole thing — 449 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Implement Batch

Orchestrate implementing a set of GitHub issues — the sub-issues of an epic, or an explicit list — onto one branch, accumulating their changes into a single commit, then hardening the result with an adversarial review pass and opening one PR via /open-pr.

This is a GitHub-only, self-contained batch driver for s-annam/okfmem. It has no Linear code and no dependency on a global /implement-issue — the per-issue implementation contract is embedded here, in the subagent spawn prompt, so this skill works for anyone who clones okfmem (contributors included), not just a maintainer whose ~/tools/skills/ has the global skills.

Why a subagent per issue. The orchestrator can't /compact mid-run, and a multi-issue run would blow the main context. Running each issue inside its own subagent is the context-isolation mechanism: the subagent's heavy explore/edit context stays down there; only a tight structured summary returns. The orchestrator stays lean across the whole sequence.

Repo facts (okfmem)

  • Repo: s-annam/okfmem, a public repo. main is protected — every change merges through a PR that needs a green verify check, linear history, and 1 approving review from a Code Owner (.github/CODEOWNERS). Direct commits/pushes to main are blocked. So this skill never commits on main — it works on one feature branch and finalizes through /open-pr. (While the repo is solo, the owner can't self-approve, so they merge via admin bypass once verify is green; that bypass ends when a co-maintainer joins.)
  • Public-repo leak rule is non-negotiable — this replaces the usual fixture-PII rule. Never let a private string into a tracked file: a real home path (/Users/<name>), a claude.ai/code/session_… URL, a Claude-Session: trailer, a personal email, or private store/session contents. Use the documented placeholders (~/okfmem-store, $OKFMEM_STORE, /Users/you). The gate is python3 scripts/check-leaks.py — it scans tracked-file content and exits non-zero naming file:line. It runs first in CI (hard fail) and again in /open-pr's preflight (Step 3.5); flag any new private-looking prose the moment a subagent reports it, since the gate cannot judge whether prose is otherwise private.
  • Gates: python3 scripts/check-leaks.py (hard) · python3 -m pytest tests/ · ruff check . (advisory) · ruff format --check . (advisory). CI's verify runs the whole mirror across an OS matrix. Per issue, run only the fast/affected checks — the leak gate + the affected pytest files + ruff check on the touched files. The full matrix verify is the PR gate (CI), not a per-issue gate. There is no typecheck / build / fallow step — this is pure-Python stdlib.
  • Confirmation discipline (okfmem-specific, three-rung ladder). okfmem's own scripts must never silently mutate outward or user-owned state, and never destroy without a typed confirmation. If an issue's change adds/edits a state-changing op, the implementing subagent MUST place it on the right rung (read-only/additive → no friction; outward/user-config mutating → [y/N] + skippable-non-interactively with a printed manual command; destructive → typed confirmation, never a bare -Force). See CLAUDE.md → "Confirmation discipline". Treat a violation as a blocking review finding.
  • Reviewer agent: ecc:python-reviewer (pure-Python repo), falling back to ecc:code-reviewer. These are maintainer-global (~/.claude/agents/), not in this repo — a fresh clone won't have them. On the default (review-on) path, if no ecc:* reviewer resolves, fall back to a general-purpose subagent driving the built-in /code-review skill; a fresh clone that wants to skip review entirely passes --no-review.
  • Cross-platform. okfmem ships .ps1/.cmd wrappers and Windows-aware path code. If an issue touches path handling, encoding, or a shipped .ps1, the subagent must respect the codebase's Windows invariants (pure-ASCII .ps1, path decisions by shape not isdir, expected path-assertion values from the code's own normalizer). Treat a hand-typed POSIX literal in a path assertion as a blocking finding — it fails Windows-only CI.

Read the full file on GitHub · 449 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 449 lines · 92 tokens per session scan A 4fa08aee0cb1

Subscribe to this mod's changes

implement-batch is a skill published in the GitHub repository s-annam/okfmem (5 stars, last pushed 19d ago), licensed Apache-2.0. It adds 92 tokens to every session and 7,370 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

brainstorming

You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.

obra/superpowers · 37 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

agent-host-chat-contributions

Build and review cross-cutting agent-host chat behavior through lifecycle contributions. Use when adding turn lifecycle side effects, prompt or context injection, restored-history transformation, protocol-action observation, or when reviewing changes that add code to AgentSideEffects or AgentService.

microsoft/vscode · 56 tokens

auto-perf-optimize

Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.

microsoft/vscode · 62 tokens