Borrowing it
Nothing to install: this file belongs to tenstorrent/tt-studio. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/tenstorrent/tt-studio/main/.claude/skills/feature-branch-pr/SKILL.mdgit clone --depth 1 https://github.com/tenstorrent/tt-studioWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tenstorrent/tt-studio/feature-branch-pr)<a href="https://agentmods.dev/skills/tenstorrent/tt-studio/feature-branch-pr"><img src="https://agentmods.dev/badge/skills/tenstorrent/tt-studio/feature-branch-pr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tenstorrent/tt-studio/feature-branch-pr"><img src="https://agentmods.dev/badge/skills/tenstorrent/tt-studio/feature-branch-pr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 24 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00126 | $0.01980 |
| Opus 5 | $0.00063 | $0.00990 |
| Sonnet 5 | $0.00025 | $0.00396 |
| Haiku 4.5 | $0.00013 | $0.00198 |
Grade A, and why
feature-branch-pr scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| Backend (Django) | `curl -f http://localhost:8000/up/` → 200 | How it starts
The opening of the file, as written. The whole thing — 212 lines — stays where its author put it; the contents beside it link to each section on GitHub.
TT-Studio Feature Branch + PR Workflow
Follow this when asked to make a change and/or open a PR in tt-studio. The
goal is a small, verified, professional change that touches nothing it
shouldn't.
Guardrails (always true)
- Base everything on
dev. Features branch offdevand PRs targetdev.mainis production/tagged code only — never branch a feature off it or open a feature PR against it. - Never commit on
devormaindirectly, and nevergit push --force(or--force-with-lease) to a shared branch. - Leave other branches alone. No checkout-and-edit of unrelated branches, no rebasing or deleting branches you didn't create for this task.
- No AI attribution anywhere. Commit messages, PR titles/descriptions, and
review comments must read as a human wrote them. Do not add
Co-Authored-Bytrailers for AI tools and do not mention "Claude", "Claude Code", "Cursor", "AI assistant", or similar.
Workflow checklist
Copy this and tick as you go:
- [ ] 1. Identify the username
- [ ] 2. Branch off dev
- [ ] 3. Make the minimal change
- [ ] 4. Verify (endpoints / tests)
- [ ] 5. Clean up instrumentation
- [ ] 6. Stage only intended files
- [ ] 7. Commit (human message)
- [ ] 8. Push + open PR against dev
- [ ] 9. Return to the original branch
1. Identify the username
Derive the branch prefix from git config:
git config user.name; git config user.email
Use the lowercased first name / email local-part (e.g. johnsingh@... →
john). If it's ambiguous, ask the user which prefix to use. This repo's
convention is <username>/<feature> (e.g. john/ttft-fix).
2. Branch off dev
Always start from the latest dev, and remember where you came from:
ORIG=$(git branch --show-current) # so you can return in step 9
git fetch origin
git checkout -b <username>/<short-kebab-feature> origin/dev
Pick a short, descriptive kebab-case feature name (reset-view-fix,
p100-support). Confirm git status is clean before editing.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 212 lines · 126 tokens per session scan A 24f8423732fa
feature-branch-pr is a skill published in the GitHub repository tenstorrent/tt-studio (50 stars, last pushed today), licensed Apache-2.0. It adds 126 tokens to every session and 1,980 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
git-safety
Git safety rules. INVOKE WHEN: git push, force push, git reset, git clean, destructive git, push force, reset hard. NEVER force push or do destructive git operations.
release-safety
Release safety rules. INVOKE WHEN: yarn release, npm publish, release canary, release packages, publishing, skip checks, skip tests. NEVER skip checks or tests without explicit permission.
compiler-commit
Use when you want to verify compiler changes and commit with the correct convention. Runs tests, lint, and format, then commits with the [compiler] or [rust-compiler] prefix.
merge-seed
Merge upstream React Starter Kit updates (the seed remote) into main, preserving this project's identity, scope, and behavior. Use when asked to sync, pull, or merge the seed / starter kit / upstream template.
tamagui
Universal React UI framework for web and native. Use when building cross-platform apps with Tamagui, creating styled components with styled(), configuring design tokens/themes, using Tamagui UI components, or working with animations. Triggers: "tamagui", "styled()", "$token", "XStack/YStack", "useTheme", "@tamagui/"…
commit
Create git commits in the Unovis repo that pass its commitlint rules. Unovis uses a CUSTOM commit format (Type | Scope | Subscope: Sentence-case subject), NOT Conventional Commits, so feat:/fix: will be rejected by the commit-msg hook. Use this whenever staging and committing changes, writing or rewriting a commit…