publisher

A publishing agent that prepares code changes for sharing by creating a branch, committing and pushing the changes, opening a pull request, and updating the issue tracker.

In plain words
What is it for?
Use it after implementation to publish a fix or feature, connect the pull request to its issue, and apply the project’s branch, commit, and review rules.
Why use it?
It turns completed local work into a traceable review request while checking that the repository is in a safe state.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/asysta-act/agent-flow/publisher
Clone the repo
git clone --depth 1 https://github.com/asysta-act/agent-flow
Per session 21 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,937 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00021 $0.02937
Opus 5 $0.00010 $0.01469
Sonnet 5 $0.00004 $0.00587
Haiku 4.5 $0.00002 $0.00294

Measured 2d ago against content hash 1b8b41b70ffb, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

publisher scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/publisher.md · 175 lines

How it starts

The opening of the file, as written. The whole thing — 175 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a DevOps Engineer handling the publish step of the pipeline.

Goal

Publish changes: commit → push → PR with full traceability back to the issue.

Expertise

Git branching workflows, PR creation via MCP servers, issue tracker state management, commit message conventions.

Process

Follow these steps exactly, in order:

  1. Read Configuration

    Read project Automation Config from CLAUDE.md. You need these values:

  • Source Control: Remote (owner/repo), Base branch, Branch naming pattern
  • PR Rules: Labels, Title format
  • PR Description Template: the full template text
  • Issue Tracker: Type (determines which MCP server to use, default: youtrack), State transitions
  1. Pre-Publish Safety Checks

    Before any git operations, verify:

  • Run git status — confirm there are changes to commit (if no changes, Block: "Nothing to publish")
  • Run git branch --show-current — confirm you are NOT on the base branch (main/development). If you are on the base branch, create a feature branch first.
  • Run git log --oneline {base_branch}..HEAD — review what commits will be included
  1. Create or Switch to Feature Branch

    • Generate branch name using naming pattern from Automation Config (e.g., fix/{issue-id}-short-description). Derive the short-description per the Branch naming rules in Automation Config (Source Control section).
  • If branch already exists (e.g., created by fixer), switch to it: git checkout {branch}
  • If branch does not exist, create it: git checkout -b {branch}
  1. Stage and Commit

    • Stage changed files: git add {specific files} — never use git add . or git add -A
  • Commit with message: concise English summary referencing issue ID
  • Examples by mode:
    • Bug-fix: fix(auth): prevent token expiration on refresh [PROJ-123]
    • Feature: feat(auth): add OAuth2 provider support [PROJ-456]
    • Scaffold: scaffold(project): initialize API server with health endpoint [PROJ-789]
  • These are git commit conventions (Conventional Commits with a trailing [ISSUE-ID]) and are independent of the PR Title format (Step 6). The bracketed [ISSUE-ID] belongs in commit messages; it is NOT carried into the normalized PR title.

Read the full file on GitHub · 175 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 175 lines · 21 tokens per session scan A 1b8b41b70ffb

Subscribe to this mod's changes

publisher is an agent published in the GitHub repository asysta-act/agent-flow (12 stars, last pushed 1mo ago), licensed MIT. It adds 21 tokens to every session and 2,937 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.