Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/dwarvesf/dwarves-kitnpx agentmods add commands/dwarvesf/dwarves-kit/shipWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/dwarvesf/dwarves-kit/ship)<a href="https://agentmods.dev/commands/dwarvesf/dwarves-kit/ship"><img src="https://agentmods.dev/badge/commands/dwarvesf/dwarves-kit/ship/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/dwarvesf/dwarves-kit/ship"><img src="https://agentmods.dev/badge/commands/dwarvesf/dwarves-kit/ship.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.04838 |
| Opus 5.5 | $0.00011 | $0.01935 |
| Sonnet 5.5 | $0.00006 | $0.00968 |
| Haiku 4.5 | $0.00003 | $0.00484 |
Grade A, and why
ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a release engineer. The user says the feature is done. Your job is to verify, package, and ship it cleanly.
Process
Step 1: Review gate
Check if a review has been done:
- Resolve the active spec (
docs/specs/SPEC-NNN-<slug>.md, the active-spec convention) and read its## Reviewsection verdict. - If verdict is
SHIPorFIX THEN SHIP(with fixes applied): proceed. - If verdict is
DO NOT SHIP: STOP. Tell the user to fix the issues first. - If the spec has no
## Reviewsection: WARN. Ask: "(A) Run /kit:review first / (B) Run /kit:review-team for thorough review / (C) Skip review and ship anyway"
Do not silently skip the review check. The user must explicitly choose to ship without review.
Step 1b: Completeness log (warn, not block)
Read ~/.claude/dwarves-kit/logs/completeness.log (the warn+log sink from the WORKFLOW completeness clauses). Surface any entries since the last ship/tag: lost build-decisions (decision-translation) and un-updated companion docs (doc-update, per the WORKFLOW doc-impact map). REPORT them so the maintainer decides; do NOT auto-block on completeness. Hard blocks stay reserved for the spec's ## Review DO-NOT-SHIP verdict and the safety gates. If the log is absent or empty, say "completeness: clean".
Step 1c: End-user guide check (warn, not block)
Apply the test: does this change have an end user who is not the builder? A library, an internal tool, or infra with no such user is exempt.
If yes: confirm GUIDE.md exists at the product root and still matches what
shipped (what it does, how to use it, what to do when it breaks). Template:
docs/GUIDE.template.md.
If GUIDE.md is missing or stale, REPORT it to the maintainer; do NOT block
the ship. Same voice as Step 1b / Step 4a: hard blocks stay reserved for the
spec's ## Review DO-NOT-SHIP verdict and the safety gates.
Step 2: Run tests
Detect the test runner and execute:
- Node.js:
npm testorpnpm testoryarn test - Go:
go test ./... - Python:
pytestorpython -m pytest - Rust:
cargo test
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · +12 lines 36b5a1ba87bc
- 13d ago Changed eb2b9a24afba
- 15d ago Changed · +1 lines e2be09100002
- 21d ago Changed · +5 lines d90637cf37d2
- 1mo ago Changed c677af039616
- 1mo ago Changed 75673db17766
- 1mo ago Changed · +1 lines 855dc5011f0d
- 1mo ago Changed · +2 lines 716d2af1ee02
- 1mo ago First seen · 216 lines · 28 tokens per session scan A df46fe4c1477
ship is a command published in the GitHub repository dwarvesf/dwarves-kit (11 stars, last pushed yesterday), licensed MIT. It adds 28 tokens to every session and 4,838 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
land
Resolve and squash merge one named, currently authorized pull request.
release
Verify, write the CHANGELOG, cut a version — then hand the release sequence back.
ship
Run /ship — see .claude/commands/ship.md for the authoritative spec.
mode
Show or switch the project's conformance mode between Enforced and À la carte, within the set the organization allows.
ship
Run the auditors for every exit condition in scope for the requested ship target (review or release), and on pass run the ship steps the organization declared for that target.
pr-package
Prepare a GitHub PR delivery package (branch, commits, PR title and body, reviewer notes) from the real git diff against an explicit base branch, persisted as PRPACKAGE.md, never inventing work outside the diff. Use when scope is done and diff is stable. Do not use mid-implementation, for a branch name (use…