Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add thermiteau/maverick --skill do-issue-sologit clone --depth 1 https://github.com/thermiteau/maverickWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/thermiteau/maverick/do-issue-solo)<a href="https://agentmods.dev/skills/thermiteau/maverick/do-issue-solo"><img src="https://agentmods.dev/badge/skills/thermiteau/maverick/do-issue-solo.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.07297 |
| Opus 5 | $0.00015 | $0.03648 |
| Sonnet 5 | $0.00006 | $0.01459 |
| Haiku 4.5 | $0.00003 | $0.00730 |
Grade A, and why
do-issue-solo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 588 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Work on GitHub Issue (Autonomous)
Work on GitHub issue $ARGUMENTS autonomously, coordinating safely
with any other Maverick instance that might also hold a claim on this
issue. Follow every phase in order. Only pause to ask the user when you
are blocked or need clarification.
Preflight (mandatory)
Preflight output, captured when this skill was invoked (dynamic-content pilot — the command ran before you read this):
!uv run maverick preflight do-issue-solo 2>&1 && echo PREFLIGHT_OK
-
Ends with
PREFLIGHT_OK→ prerequisites are met; proceed. -
Shows an error → halt and report the output verbatim to the user. Do not proceed, do not work around missing prerequisites.
-
Empty, or shows the literal command text (dynamic skill content is disabled via
disableSkillShellExecution) → run it manually first and apply the same rules:uv run maverick preflight do-issue-solo
The check verifies: the project is initialised, the Maverick GitHub
App is configured (maverick gh-app status reports configured: true),
and required tools (gh, git, uv) are on PATH.
Before You Begin
If $ARGUMENTS is empty or not a valid issue number, ask the user
for the issue number before proceeding.
Determine the repo (via gh repo view --json nameWithOwner) — you will
pass it to every maverick coord command below.
PR code review runs locally during Phase 9 as the
agent-code-reviewer subagent — its binary PASS/FAIL
verdict is the gate. Some projects also opt into a CI-side re-run via
mav-bp-remote-code-review (independent verification for
multi-machine fleets or audit needs); when present it adds a status
check the auto-merge in Phase 10 will wait on, but its absence is not
a blocker.
Phase 0: Coordination + cold-start
Before any other phase.
- Run
uv run maverick coord read <repo> $ARGUMENTSand inspect the snapshot. Decide which of the four branches inmav-multi-instance-coordinationapplies:- Blocked (
blocked-by:#Nlabel): abort cleanly, report to user. - Claimed with live lease: abort cleanly, report holder + expiry.
- Claimed with stale lease: decide take-over vs defer.
- Free: proceed to claim.
- Blocked (
- Claim the issue:
uv run maverick coord claim <repo> $ARGUMENTS. The command exits non-zero if the claim is rejected — treat that as abort. - Start the workflow report (writes a
run-startrow that laterreportcalls inheritmaverick_skillfrom):
From here, agent-dispatch intervals are recorded automatically by the plugin's Subagent hooks (open on dispatch, closed on return), and invoking a tracked inner skill auto-opens itsuv run maverick report run-start do-issue-solo --issue $ARGUMENTS --phase claimedskill-dispatchinterval. Your only bookkeeping obligation is the one-linereport end --auto --outcome <…>after each inner skill returns — everything else is hooks. Anything left open is flushed asoutcome=unknownbyreport generate. - Start the heartbeat daemon. It refreshes the lease every
HEARTBEAT_INTERVAL_MINUTESminutes for as long as you hold the claim and exits on its own when the claim is released:
Never background the foreground loop withuv run maverick coord heartbeat-loop <repo> $ARGUMENTS --daemonize&— a process backgrounded from a tool shell dies with the shell or leaks unobservably. Liveness is checked in the task loop withcoord heartbeat-status. - Release is handled on every exit path without any action from you:
the plugin's SessionEnd hook runs
coord release-allwhen the session ends (normal exit, user interrupt, crash-caught), and lease expiry (10-minute TTL) covers machine death. Your only release obligations are the explicit ones at workflow boundaries:--reason mergedafter auto-merge lands,--reason ejectedon eject. Do not attempt trap-on-exit wrappers — each Bash call is a fresh shell, so a trap cannot survive to session end. - Authorization scopes (only when needed): if the issue explicitly
authorizes infrastructure changes — the
maverick-authorize-infralabel or aMaverick-Authorize: infraline in the issue body — record it so the scope-guard hook permits those edits in autonomous mode:
If the command exits non-zero, the issue does not authorize the scope: do not make infrastructure changes; note the gap in the solution design instead. Never writeuv run maverick coord authorize <repo> $ARGUMENTS infra.maverick/session-auth.jsonby any other means — the hook blocks it, and self-granting defeats the authorization model. - Cold-start hydrate per
mav-durability-on-gh. The skill is fully resumable — a fresh agent re-entering after a crash, stop, or context-exhaustion must skip phases that already completed rather than re-running them against an in-flight or merged PR (#41). Do not reconstruct the resume position by hand:
The command reads the task-progress marker, finds the PR via the recorded branch, inspects CI and the review verdict, and returnsuv run maverick coord resume-point <repo> $ARGUMENTS{next, instruction, evidence}— follow the instruction. Also check for an existing worktree under.maverick/worktrees/before creating one. Each phase below ends with atask-progress setwrite so re-entry advances one boundary at a time without re-running anything.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 588 lines · 29 tokens per session scan A de8871265a0a
do-issue-solo is a skill published in the GitHub repository thermiteau/maverick (11 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 29 tokens to every session and 7,297 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
mcore-split-pr
Split a PR into multiple PRs to reduce the number of required CODEOWNERS reviewer groups.
shiplog
Recap of everything shipped since the last run - cross-repo PRs, security fixes, star deltas, and X traction, synthesized into a digest article and a ready-to-post shiplog in your voice.
llxprt-issue-workflow
Use this skill when asked to address, fix, or work on a GitHub issue in the llxprt-code repository. Covers the complete issue lifecycle - branch setup, gh CLI usage, test-first planning, subagent delegation and review loops, the full verification cycle (including the stepfun-37 smoke test), open code review (ocr), PR…
cyrus-setup-repository
Add one or more Git repositories to Cyrus configuration so it can process issues from those repos.
github-sync
Bidirectional synchronization of epics and tasks with GitHub issues, labels, and relationships.
github-notification-triage
Triage GitHub notifications and issue/PR queues.