Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/dork-labs/dorkos/releasegit clone --depth 1 https://github.com/dork-labs/dorkosWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/dork-labs/dorkos/release)<a href="https://agentmods.dev/commands/dork-labs/dorkos/release"><img src="https://agentmods.dev/badge/commands/dork-labs/dorkos/release.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00023 | $0.10145 |
| Opus 5 | $0.00012 | $0.05072 |
| Sonnet 5 | $0.00005 | $0.02029 |
| Haiku 4.5 | $0.00002 | $0.01014 |
Grade A, and why
release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 598 lines — stays where its author put it; the contents beside it link to each section on GitHub.
System Release Command
Create a new release: bump the version, update the changelog, run harness maintenance, create a git tag, publish to npm, and optionally create a GitHub Release. Quick pre-flight checks and all user interaction happen in the main context; the context-heavy changelog/commit analysis for auto-detect is delegated to a context-isolator subagent.
Arguments
$ARGUMENTS— Optional bump type or explicit version, plus optional flags:- (no argument) — Auto-detect version bump from changelog and commits
patch/minor/major— Force that bump typeX.Y.Z— Explicit version number (e.g.,0.2.0)--dry-run— Show what would happen without making changes
Semantic Versioning
| Bump Type | When to Use | Example |
|---|---|---|
| MAJOR | Breaking changes to user config or workflows | 0.1.0 -> 1.0.0 |
| MINOR | New features, backward compatible | 0.1.0 -> 0.2.0 |
| PATCH | Bug fixes, documentation updates | 0.1.0 -> 0.1.1 |
Phase 1: Parse Arguments
Determine the bump type (patch, minor, major, explicit version, or auto — the default) and whether --dry-run is present.
Phase 2: Pre-flight Checks
# Check 1: Working directory is clean
git status --porcelain
If output is not empty, STOP: report the uncommitted files and tell the user to commit or stash before releasing.
# Check 2: On main branch, up to date with origin
git branch --show-current
git pull --ff-only
If not main, STOP: releases are cut from current main.
Repo reality (learned across v0.59.0–v0.65.0): main is push-protected and
merges only through the merge queue, so the release commit CANNOT be pushed
directly, and all branch/commit work happens in a dedicated worktree — never by
switching the shared main checkout's branch. Phase 6 below is written for that
flow: edit → release worktree → PR → queue merges it → tag the MERGED squash SHA
→ publish npm last. Tagging your local pre-merge commit tags the wrong SHA
(squash rewrites it), and pnpm publish before the merge fails pnpm's git-checks
(ERR_PNPM_GIT_NOT_LATEST).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 598 lines · 0 tokens per session scan A 5989eb8e8d01
release is a command published in the GitHub repository dork-labs/dorkos (9 stars, last pushed today), licensed MIT. It adds 23 tokens to every session and 10,145 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other commands, from other repositories
release
Prepare, cut, and verify a warren release — tracker audits, version bump, CHANGELOG curation, ROADMAP update, push, then watch the pipeline through to published artifacts.
release
You are now acting as a Release Engineer. Automatically generate a changelog from git history to assist with version releases.
push
Push direction: ports local mechanism-script fixes back to the hub as a reviewed PR. Opposite of /update.
factory-ship
Release — open a develop → master PR, wait for CI, merge, verify the deploy.
app-ship
Ship a release — runs security review, then release-manager, gating on QA sign-off and clean bug board.
OPSX: Archive
Archive a completed change in the experimental workflow.