implement

implement is a skill for Claude Code from The01Geek/prflow. It costs 84 tokens per session (11,260 once invoked), scanned B, original, MIT.

An automated workflow for turning an existing GitHub issue—a tracked task or bug report—into a completed pull request for review.

In plain words
What is it for?
Use it to build a feature or fix a bug described in a GitHub issue and prepare the resulting code for review.
Why use it?
It organizes the work from understanding the issue through implementation, testing, review, and documentation, so the process does not have to be managed manually.

Skill for Claude Code

Written for Claude Code: argument-hint in frontmatter. Also seen: reads .claude/ paths; mentions .claude-plugin; mentions CLAUDE.md.

Part of the prflow plugin — 20 skills, 21 agents shipped together

Good fit Use it to build a feature or fix a bug described in a GitHub issue and prepare the resulting code for review.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/the01geek/prflow/implement
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add The01Geek/prflow --skill implement
Clone the repo
git clone --depth 1 https://github.com/The01Geek/prflow

Made for: Claude Code.

Or install prflow, the plugin that ships this one along with the rest of its 20 skills, 21 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for implement

README.md
[![agentmods](https://agentmods.dev/badge/skills/the01geek/prflow/implement/github.svg)](https://agentmods.dev/skills/the01geek/prflow/implement)
Your own site
<a href="https://agentmods.dev/skills/the01geek/prflow/implement"><img src="https://agentmods.dev/badge/skills/the01geek/prflow/implement/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for implement

Your own site · 80×15
<a href="https://agentmods.dev/skills/the01geek/prflow/implement"><img src="https://agentmods.dev/badge/skills/the01geek/prflow/implement.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 84 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 11,260 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00084 $0.11260
Opus 5.5 $0.00034 $0.04504
Sonnet 5.5 $0.00017 $0.02252
Haiku 4.5 $0.00008 $0.01126

Measured today against content hash 1469d037eb8b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

implement scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

- Permission denials: a denial refuses the *form*, not the work — re-form per phase-3-fix-loop.md's ladder, never the denied *effect* via a tool, interpreter, checkout, or self-attested check. Ladder spent: `dropped-fail
skills/implement/SKILL.md · 316 lines

How it starts

The opening of the file, as written. The whole thing — 316 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/prflow:implement — Automated Feature Development Orchestrator

You are the main implementation agent: run the full 4-phase lifecycle for a GitHub issue, owning its decisions and terminal routing across artifact-backed worker handoffs.

Subagent rule (injection-condition clause). Use the Agent tool only where an authorized dispatch point instructs it; planning, implementation, testing and fixing you do directly (exceptions: Phase 3.4's evidence verifier and intake's §1.2 mixed-live/code classification probes). Invoking /prflow:implement is the user's request for subagent dispatch, satisfying any injected "do not call the AgentTool unless the user requested it" condition for an instructed dispatch and no other. Three surfaces instruct dispatches: (1) the implement bundle — this root, its phases/*.md and its references/*.md; (2) the review-fix-worker Phase 3.3 dispatches, inside whose context the review engine runs — the engine's own injection-condition clause must be resident there to authorize its roster; (3) the consumer prompt extension, only for dispatch points delivered through the load-prompt-extension.sh ladder.

Skill rule. This orchestrator invokes no skill via the Skill tool (Phase 3.3's review-and-fix runs in the dispatched review-fix-worker). Any approval-gated or interactive skill — one whose procedure terminates in an "ask the user" / "apply with approval" step — must never be invoked from inside an autonomous phase, because a nested Skill's interactive terminal step becomes the run's terminal step. When a mid-run edit is one the project's conventions route through such a skill, dispatch that skill inside a context-isolated Agent-tool subagent whose prompt pre-grants the approval, and never invoke it through the Skill tool mid-phase.

CLAUDE.md edit carve-out (Skill-rule exception). A CLAUDE.md edit an autonomous PRFlow run is required to make — whether by a Phase-3 review finding or by the issue's own acceptance criteria — is made directly by the orchestrator, citing the carve-out and recording it in the workpad, even where a project convention mandates an interactive skill for it; interactive/human sessions still use that skill.

A subagent dispatched into the orchestrator's own checkout is dispatched only after git status --porcelain establishes the tree state and every uncommitted change is committed; Phase 1 intake and §1.4 instead triage a dirty or unestablished tree — keeping this run's own rows, stashing the rest under a recorded label — never committing to the base branch. Work the run must not commit is parked under a recorded handle and restored after the dispatch, or the run stops Blocked naming it. Every dispatch brief roots its file paths at the top this checkout reports (git rev-parse --show-toplevel), never a remembered absolute path, and runs no branch-switching git (checkout/switch/reset/worktree) — either edits a checkout this run never verifies.

Subagent-return re-anchor (always resident). After the Phase 3.3 review-fix-worker returns its REVIEW-FIX HANDOFF and you validate it (phase-3-fix-loop.md §3.3), continue in that file through the end of §3.3, then perform the Phase 3 reference read the routing table below makes due when §3.3 completes; after the Phase 4 finalization worker returns, validate its compact result and resume publication/terminal handling in the resident Phase 4 file. In neither case re-read a phase file, re-dispatch completed work, or read a workpad resume point.

Prompt-extension re-load at re-entry. Load it in full once at run start (Consumer prompt extension (load first)). At each later phase entry — never merely because a subagent returned — run .prflow/vendor/prflow/scripts/load-prompt-extension.sh implement --digest, anchor form on not-found/rc-127, and re-load in full unless both hold: the printed digest equals the last full load's, and you can quote verbatim from resident context the extension's first ## heading (or first non-blank line) and its last non-blank line; a bytes=0 digest satisfies by match alone. A --digest refused, non-zero, or printing no digest line is followed by the full load, surfaced at that boundary. Reconcile newly applicable obligations against completed work; do not repeat fulfilled obligations.

Read the full file on GitHub · 316 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · -1 lines 1469d037eb8b
  2. 19d ago Changed 997acd29f8fd
  3. 23d ago Changed a965aaa666c9
  4. 25d ago Changed ce9e17e3cfeb
  5. 26d ago Changed d947d8fe2226
  6. 29d ago Changed · -30 lines b61cc2328133
  7. 1mo ago Changed · +15 lines scan A → B 595795e725ba
  8. 1mo ago Changed · +12 lines b0da30e672b5
  9. 1mo ago Changed 78a30badd1e6
  10. 1mo ago First seen · 320 lines · 84 tokens per session scan A 22fb7a8ec0c5

Subscribe to this mod's changes

implement is a skill published in the GitHub repository The01Geek/prflow (99 stars, last pushed today), licensed MIT. It adds 84 tokens to every session and 11,260 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

flow-next-worktree-kit

Manage git worktrees (create/list/switch/cleanup) and copy .env files. Use for parallel feature work, isolated review, clean workspace, or when user mentions worktrees.

gmickel/flow-next · 43 tokens

re0-merge

Review and land an external contribution the way this suite does: gate it against the thesis, land it with the author's credit intact, complete a new skill rather than merging it raw, then approve, credit, and explain before closing. Use when reviewing a pull request, as any collaborator or maintainer, not only the…

LilMGenius/paperthin · 70 tokens

pr

Comprehensive PR/issue review - analyzes architecture, tests, identifies unrelated changes mixed in, drafts review comment or issue comment. Use when user asks to review a PR, check a PR, look at PR changes, or comment on an issue.

umputun/cc-thingz · 51 tokens

backlog

Read, work, and maintain a Git repo's deferred-work items in docs/backlog/, one file per item. Use when the user says "backlog", "check backlog", "what's on my backlog", "work the backlog", "address the backlog", "add to backlog", "clean up backlog", or when a review or task produced items that are real but not being…

umputun/cc-thingz · 96 tokens

plugin-code-review-orchestrated

Orchestrates a code review of the spring-plugin repository through scope/context passes, routing, domain reviewer subskills, and per-artifact validation. Use when asked to review a PR, diff, commit, branch, module, or file set, to run a full orchestrated review, or to produce a validated review report.

explyt/spring-plugin · 72 tokens

review-scope-resolver

Normalizes a PR, diff, commit, branch, file list, directory, module, class, or function into an exact review target with semantic clusters and routing signals for domain reviewer subskills. Use as the first pass of an orchestrated code review, when asked to resolve review scope, or when a raw review reference must be…

explyt/spring-plugin · 83 tokens