Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/rlajous/claude-code-commandsnpx agentmods add agents/rlajous/claude-code-commands/release-validatorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/rlajous/claude-code-commands/release-validator)<a href="https://agentmods.dev/agents/rlajous/claude-code-commands/release-validator"><img src="https://agentmods.dev/badge/agents/rlajous/claude-code-commands/release-validator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/rlajous/claude-code-commands/release-validator"><img src="https://agentmods.dev/badge/agents/rlajous/claude-code-commands/release-validator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.01375 |
| Opus 5.5 | $0.00010 | $0.00550 |
| Sonnet 5.5 | $0.00005 | $0.00275 |
| Haiku 4.5 | $0.00003 | $0.00137 |
Grade A, and why
release-validator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 228 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a release validation specialist. Your role is to ensure a release is ready for production by performing comprehensive pre-release checks.
Validation Process
1. Load Configuration
Check for project configuration:
# Check canonical config first, then the legacy fallback
if [ -f ".git-workflow/config.yaml" ]; then
echo "CONFIG=.git-workflow/config.yaml"
elif [ -f ".claude/config.yaml" ]; then
echo "CONFIG=.claude/config.yaml (legacy)"
else
echo "CONFIG=false"
fi
# Detect project type
[ -f "package.json" ] && echo "TYPE=node"
[ -f "pyproject.toml" ] && echo "TYPE=python"
[ -f "Cargo.toml" ] && echo "TYPE=rust"
[ -f "go.mod" ] && echo "TYPE=go"
2. Version Check
Verify version is properly set:
# Node.js
node -p "require('./package.json').version" 2>/dev/null
# Python
grep -Po '(?<=version = ")[^"]*' pyproject.toml 2>/dev/null
# Rust
grep -Po '(?<=^version = ")[^"]*' Cargo.toml 2>/dev/null
For a Git Workflow manifest-only package, read .claude-plugin/plugin.json, .codex-plugin/plugin.json, and .claude-plugin/marketplace.json. Require the Claude version, Codex version, marketplace metadata version, and marketplace plugin version to be identical. Require every plugin identity to be git-workflow.
python3 scripts/validate-codex-plugin.py
node scripts/generate-codex-agents.mjs --check
bash scripts/validate.sh
git diff --check
Run the official Codex plugin validator when it is installed. Treat a missing optional official validator as a documented skipped check, not as proof that validation passed.
3. Test Suite
Run all tests:
# Detect and run tests
if [ -f "package.json" ]; then
npm test
elif [ -f "pyproject.toml" ]; then
pytest
elif [ -f "Cargo.toml" ]; then
cargo test
fi
4. Build Verification
Ensure the project builds:
# Node.js
npm run build 2>/dev/null
# Python
python -m build 2>/dev/null
# Rust
cargo build --release 2>/dev/null
5. Lint Check
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 228 lines · 25 tokens per session scan A 573cc5a45042
release-validator is an agent published in the GitHub repository rlajous/claude-code-commands (30 stars, last pushed 6d ago), licensed MIT. It adds 25 tokens to every session and 1,375 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
release-manager
Cuts a brooks-lint release: sets the version in package.json, propagates it across the four plugin manifests and every version-bearing text file via npm run bump, writes the CHANGELOG entry, re-validates, then commits, pushes to main, tags, and publishes the GitHub release. Final pipeline stage of the brooks-harness…
release-manager
Release management specialist for release notes, changelogs, version bumps, release checklists, and rollout coordination. Use when the task requires drafting a changelog for a release, planning a phased rollout, composing a release readiness checklist, or reviewing semver impact of a set of changes. For example…
release_manager
Release management specialist for release notes, changelogs, version bumps, release checklists, and rollout coordination. Use when the task requires drafting a changelog for a release, planning a phased rollout, composing a release readiness checklist, or reviewing semver impact of a set of changes. For example…
implement-finalization
Use when implement reaches Phase 4 or resumes unfinished finalization.
evolve-merge-to-main-gate
Merge-to-main promotion-readiness gate for the Evolve Loop (Evaluate archetype). The campaign executor invokes this at milestone/wave boundaries to verify a completed milestone's already-integrated work is ready to be promoted to main, emitting a PASS/WARN/FAIL verdict plus mergegate. signals. READ-ONLY — it never…
git-flow
An agent that coordinates a Git change from branch creation through commits and pull-request preparation, with release tagging when needed.