Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/boykush/scraps/release-tag-creategit clone --depth 1 https://github.com/boykush/scrapsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/boykush/scraps/release-tag-create)<a href="https://agentmods.dev/commands/boykush/scraps/release-tag-create"><img src="https://agentmods.dev/badge/commands/boykush/scraps/release-tag-create.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00007 | $0.00991 |
| Opus 5 | $0.00003 | $0.00495 |
| Sonnet 5 | $0.00001 | $0.00198 |
| Haiku 4.5 | $0.00001 | $0.00099 |
Grade A, and why
release-tag-create scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Create a release tag for the Scraps project using the following workflow:
Arguments:
$ARGUMENTS: Version number (e.g., "0.27.0")
Workflow:
-
Create a release branch from up-to-date main:
- Check current branch with
git branch --show-current - If not on main, stash changes with
git stashand checkout main withgit checkout main - Pull latest changes with
git pull - Create the release branch:
git checkout -b release/v$ARGUMENTS - Never commit the version bump on main: main rejects direct pushes
- Check current branch with
-
Update version in Cargo.toml files:
- Update
version = "X.Y.Z"in/Cargo.toml(two occurrences:[workspace.package]and[workspace.dependencies.scraps_libs]) - Update
version = "X.Y.Z"in/modules/libs/Cargo.toml - Run
mise run cargo:buildsoCargo.lockpicks up bothscrapsandscraps_libs
- Update
-
Commit version bump and push the branch:
- Add all changed files:
Cargo.toml,Cargo.lock,modules/libs/Cargo.toml - Commit with message format:
v$ARGUMENTS(e.g., "v0.27.0") - Include Claude Code attribution in commit body
- Push the branch:
git push -u origin release/v$ARGUMENTS
- Add all changed files:
-
Open the release PR:
gh pr create --base main --title "v$ARGUMENTS" --body "<summary>"- Show the PR URL to the user
-
Wait for required checks and merge:
- Watch required checks with
gh pr checks --watch(buildandzizmor) - main also requires an approving review, and the agent cannot approve or merge its own PR: ask the user to merge
- Do not continue until
gh pr view --json state,mergedAtreports the PR asMERGED
- Watch required checks with
-
Tag the merged commit (only after the merge is confirmed):
git checkout main && git pull- Verify
versioninCargo.tomlmatches$ARGUMENTSandgit log -1 --onelineis the merged version bump - Create tag:
git tag v$ARGUMENTS - Request confirmation before pushing tag
- Push tag:
git push origin v$ARGUMENTS(requires user approval)
-
Verify:
- Confirm tag creation with
git tag --sort=-v:refname | head -5 - Confirm the tag is on main with
git merge-base --is-ancestor v$ARGUMENTS origin/main
- Confirm tag creation with
Usage: /release-tag-create 0.27.0
Example:
# For version 0.27.0
/release-tag-create 0.27.0
Notes:
- The version bump must go through a PR: main blocks direct pushes and requires the
buildandzizmorchecks plus a review approval - Never create or push the tag before the PR is merged; a tag that is not an ancestor of main has to be deleted with
git push origin :refs/tags/v$ARGUMENTSand recreated - The version format should be semver without 'v' prefix in arguments
- Tag will be created with 'v' prefix (e.g., v0.27.0)
- User confirmation is required before pushing the tag: publishing a GitHub Release from it triggers the crates.io publish, the homebrew-tap update, and the floating v{major}/v{major}.{minor} tag moves (see
.github/workflows/release.yml)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 65 lines · 7 tokens per session scan A 9e0b42a57ba0
release-tag-create is a command published in the GitHub repository boykush/scraps (47 stars, last pushed 4d ago), licensed MIT. It adds 7 tokens to every session and 991 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
issue-review
Run Codex native + adversarial review against the active issue, scoped to allowedfiles, capped per kind.
issue-closeout
Triage Codex findings via per-finding dispositions, record findingstriaged, close the active issue.
prd-triage
Triage pending findings on the active PRD.
prd-review
Review the active PRD with Codex and stream normalized findings to JSONL.
issue-amend
Re-snapshot the active issue's scope from the spec, clear verified and reviewed receipts, and record the change as a permanent amendment.
prd-archive
Archive the active PRD (blocked until every accepted finding has a receipt).