Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add abiswas97/gemini-plugin-cc --skill releasegit clone --depth 1 https://github.com/abiswas97/gemini-plugin-ccWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/abiswas97/gemini-plugin-cc/release)<a href="https://agentmods.dev/skills/abiswas97/gemini-plugin-cc/release"><img src="https://agentmods.dev/badge/skills/abiswas97/gemini-plugin-cc/release/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/abiswas97/gemini-plugin-cc/release"><img src="https://agentmods.dev/badge/skills/abiswas97/gemini-plugin-cc/release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.00361 |
| Opus 5.5 | $0.00007 | $0.00144 |
| Sonnet 5.5 | $0.00004 | $0.00072 |
| Haiku 4.5 | $0.00002 | $0.00036 |
Grade B, and why
release scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Unrestricted tool accessmediumExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
Do not run any commands. What it actually says
Trigger the release pipeline
This skill fires release-draft.yml on CI. The workflow bumps versions, generates the CHANGELOG entry, and opens a release PR. You review and merge that PR; release-publish.yml then tags and creates the GitHub Release.
Validate the argument
The argument must be exactly one of patch, minor, major. If $ARGUMENTS is anything else (empty, misspelled, multiple values), stop and print:
Usage:
/release patch|minor|major
Do not run any commands.
Dispatch the workflow
With a valid bump type, run:
gh workflow run release-draft.yml -f bump=$ARGUMENTS
If the call fails with a permissions error, print:
This skill is maintainer-only. The repository permissions gate release dispatch; your account does not have
actions:writeon abiswas97/gemini-plugin-cc.
Stop.
Show the run
On success, wait a moment, then run:
gh run list --workflow=release-draft.yml --limit=1 --json databaseId,url,status
Print the URL so the user can watch it. Tell them:
- The run will pause on the
releaseenvironment approval gate - They need to approve it in the Actions tab to proceed
- Once approved, it will run CI, generate the CHANGELOG, and open a release PR
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 48 lines · 18 tokens per session scan B 73b98bab0ac2
release is a skill published in the GitHub repository abiswas97/gemini-plugin-cc (47 stars, last pushed 6mo ago), licensed Apache-2.0. It adds 18 tokens to every session and 361 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ops-ship
OPS on-demand: This skill should be used when the user asks to "ship ops plugin", "merge all PRs and…
push-ci
Push to remote and monitor CI. Validates branch safety, executes git push WITH explicit user approval, then monitors CI run status via gh CLI. Use when: user says 'push', 'push and watch CI', 'ship it', 'push-ci'. Not for: committing (use /smart-commit), creating PRs (use /create-pr), merging (use /merge-prep).
cmux-release
Prefer the /release command. It determines the new version (minor by default), gathers the Changelog line from each PR merged since the last stable tag, updates CHANGELOG.md, runs ./scripts/bump-version.sh, commits, runs ./scripts/release-pretag-guard.sh, then tags and pushes.
pipeline-digest
Daily release-pipeline digest with a change gate — reports which plugins are pending release, whether main's CI is green, and which branches went stale, and notifies the operator only when that state actually moved since the last run. Use when the operator asks "what moved in the pipeline", "anything to ship"…
npm-publish
A setup guide for automatically publishing an npm package through GitHub Actions to npmjs.com. npmjs.com is a registry where JavaScript packages are shared, and GitHub Actions runs automated tasks from a repository.
lov-release-via-cicd
A release workflow for Node, Tauri, Vite, shell, and GitHub Release projects. It checks or configures automated versioning and publishing, including macOS signing and notarisation when relevant.