Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add The01Geek/prflow --skill implementgit clone --depth 1 https://github.com/The01Geek/prflowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/the01geek/prflow/implement)<a href="https://agentmods.dev/skills/the01geek/prflow/implement"><img src="https://agentmods.dev/badge/skills/the01geek/prflow/implement/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/the01geek/prflow/implement"><img src="https://agentmods.dev/badge/skills/the01geek/prflow/implement.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00084 | $0.11260 |
| Opus 5.5 | $0.00034 | $0.04504 |
| Sonnet 5.5 | $0.00017 | $0.02252 |
| Haiku 4.5 | $0.00008 | $0.01126 |
Grade B, and why
implement scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- Permission denials: a denial refuses the *form*, not the work — re-form per phase-3-fix-loop.md's ladder, never the denied *effect* via a tool, interpreter, checkout, or self-attested check. Ladder spent: `dropped-fail How it starts
The opening of the file, as written. The whole thing — 316 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/prflow:implement — Automated Feature Development Orchestrator
You are the main implementation agent: run the full 4-phase lifecycle for a GitHub issue, owning its decisions and terminal routing across artifact-backed worker handoffs.
Subagent rule (injection-condition clause). Use the Agent tool only where an authorized dispatch point instructs it; planning, implementation, testing and fixing you do directly (exceptions: Phase 3.4's evidence verifier and intake's §1.2 mixed-live/code classification probes). Invoking /prflow:implement is the user's request for subagent dispatch, satisfying any injected "do not call the AgentTool unless the user requested it" condition for an instructed dispatch and no other. Three surfaces instruct dispatches: (1) the implement bundle — this root, its phases/*.md and its references/*.md; (2) the review-fix-worker Phase 3.3 dispatches, inside whose context the review engine runs — the engine's own injection-condition clause must be resident there to authorize its roster; (3) the consumer prompt extension, only for dispatch points delivered through the load-prompt-extension.sh ladder.
Skill rule. This orchestrator invokes no skill via the Skill tool (Phase 3.3's review-and-fix runs in the dispatched review-fix-worker). Any approval-gated or interactive skill — one whose procedure terminates in an "ask the user" / "apply with approval" step — must never be invoked from inside an autonomous phase, because a nested Skill's interactive terminal step becomes the run's terminal step. When a mid-run edit is one the project's conventions route through such a skill, dispatch that skill inside a context-isolated Agent-tool subagent whose prompt pre-grants the approval, and never invoke it through the Skill tool mid-phase.
CLAUDE.md edit carve-out (Skill-rule exception). A CLAUDE.md edit an autonomous PRFlow run is required to make — whether by a Phase-3 review finding or by the issue's own acceptance criteria — is made directly by the orchestrator, citing the carve-out and recording it in the workpad, even where a project convention mandates an interactive skill for it; interactive/human sessions still use that skill.
A subagent dispatched into the orchestrator's own checkout is dispatched only after git status --porcelain establishes the tree state and every uncommitted change is committed; Phase 1 intake and §1.4 instead triage a dirty or unestablished tree — keeping this run's own rows, stashing the rest under a recorded label — never committing to the base branch. Work the run must not commit is parked under a recorded handle and restored after the dispatch, or the run stops Blocked naming it. Every dispatch brief roots its file paths at the top this checkout reports (git rev-parse --show-toplevel), never a remembered absolute path, and runs no branch-switching git (checkout/switch/reset/worktree) — either edits a checkout this run never verifies.
Subagent-return re-anchor (always resident). After the Phase 3.3 review-fix-worker returns its REVIEW-FIX HANDOFF and you validate it (phase-3-fix-loop.md §3.3), continue in that file through the end of §3.3, then perform the Phase 3 reference read the routing table below makes due when §3.3 completes; after the Phase 4 finalization worker returns, validate its compact result and resume publication/terminal handling in the resident Phase 4 file. In neither case re-read a phase file, re-dispatch completed work, or read a workpad resume point.
Prompt-extension re-load at re-entry. Load it in full once at run start (Consumer prompt extension (load first)). At each later phase entry — never merely because a subagent returned — run .prflow/vendor/prflow/scripts/load-prompt-extension.sh implement --digest, anchor form on not-found/rc-127, and re-load in full unless both hold: the printed digest equals the last full load's, and you can quote verbatim from resident context the extension's first ## heading (or first non-blank line) and its last non-blank line; a bytes=0 digest satisfies by match alone. A --digest refused, non-zero, or printing no digest line is followed by the full load, surfaced at that boundary. Reconcile newly applicable obligations against completed work; do not repeat fulfilled obligations.
What ships with it
29 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- phases/phase-1-setup.md 27 KB
- phases/phase-2-implement.md 41 KB
- phases/phase-2-sweeps-contract.md 32 KB
- phases/phase-2-sweeps-quality.md 41 KB
- phases/phase-3-ac-gate.md 33 KB
- phases/phase-3-fix-loop.md 12 KB
- phases/phase-3-review.md 5.2 KB
- phases/phase-4-documentation.md 16 KB
- references/deferred-filing.md 10 KB
- references/doc-deliverable-self-heal.md 4.7 KB
- references/extension-row-ticks.md 4.1 KB
- references/phase-1-intake.md 37 KB
- references/phase-2-0-resume-gate.md 7.2 KB
- references/phase-2-2-6-ac-plan-reconciliation.md 4.6 KB
- references/phase-2-5-workflow-edit-guard.md 2.0 KB
- references/phase-3-3-review-fix-return.md 49 KB
- references/phase-3-3-review-fix.md 6.4 KB
- references/phase-4-finalization.md 60 KB
- references/post-merge-tagging.md 11 KB
- references/sweep-2-3-0-changed-contract.md 5.7 KB
- references/sweep-2-3-0a-peer-checkpoint.md 8.7 KB
- references/sweep-2-3-0b-enum-enumeration.md 3.3 KB
- references/sweep-2-3-0c-operand-trace.md 5.7 KB
- references/sweep-2-3-0d-describing-prose.md 8.7 KB
- references/sweep-2-3-1-orphaned-setup.md 1.4 KB
- references/sweep-2-3-2-stranded-dependents.md 3.5 KB
- references/sweep-2-3-4-workflow-addendum.md 2.0 KB
- references/sweep-2-3-4a-change-of-direction.md 1.7 KB
- references/sweep-2-3-7-collection-cardinality.md 873 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · -1 lines 1469d037eb8b
- 19d ago Changed 997acd29f8fd
- 23d ago Changed a965aaa666c9
- 25d ago Changed ce9e17e3cfeb
- 26d ago Changed d947d8fe2226
- 29d ago Changed · -30 lines b61cc2328133
- 1mo ago Changed · +15 lines scan A → B 595795e725ba
- 1mo ago Changed · +12 lines b0da30e672b5
- 1mo ago Changed 78a30badd1e6
- 1mo ago First seen · 320 lines · 84 tokens per session scan A 22fb7a8ec0c5
implement is a skill published in the GitHub repository The01Geek/prflow (99 stars, last pushed today), licensed MIT. It adds 84 tokens to every session and 11,260 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
flow-next-worktree-kit
Manage git worktrees (create/list/switch/cleanup) and copy .env files. Use for parallel feature work, isolated review, clean workspace, or when user mentions worktrees.
re0-merge
Review and land an external contribution the way this suite does: gate it against the thesis, land it with the author's credit intact, complete a new skill rather than merging it raw, then approve, credit, and explain before closing. Use when reviewing a pull request, as any collaborator or maintainer, not only the…
pr
Comprehensive PR/issue review - analyzes architecture, tests, identifies unrelated changes mixed in, drafts review comment or issue comment. Use when user asks to review a PR, check a PR, look at PR changes, or comment on an issue.
backlog
Read, work, and maintain a Git repo's deferred-work items in docs/backlog/, one file per item. Use when the user says "backlog", "check backlog", "what's on my backlog", "work the backlog", "address the backlog", "add to backlog", "clean up backlog", or when a review or task produced items that are real but not being…
plugin-code-review-orchestrated
Orchestrates a code review of the spring-plugin repository through scope/context passes, routing, domain reviewer subskills, and per-artifact validation. Use when asked to review a PR, diff, commit, branch, module, or file set, to run a full orchestrated review, or to produce a validated review report.
review-scope-resolver
Normalizes a PR, diff, commit, branch, file list, directory, module, class, or function into an exact review target with semantic clusters and routing signals for domain reviewer subskills. Use as the first pass of an orchestrated code review, when asked to resolve review scope, or when a raw review reference must be…