Borrowing it
Nothing to install: this file belongs to agent-tower/core. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/agent-tower/core/main/.agents/skills/github-desktop-release/SKILL.mdgit clone --depth 1 https://github.com/agent-tower/coreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/agent-tower/core/github-desktop-release)<a href="https://agentmods.dev/skills/agent-tower/core/github-desktop-release"><img src="https://agentmods.dev/badge/skills/agent-tower/core/github-desktop-release/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/agent-tower/core/github-desktop-release"><img src="https://agentmods.dev/badge/skills/agent-tower/core/github-desktop-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.00799 |
| Opus 5.5 | $0.00025 | $0.00320 |
| Sonnet 5.5 | $0.00013 | $0.00160 |
| Haiku 4.5 | $0.00006 | $0.00080 |
Grade A, and why
github-desktop-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
GitHub Desktop Release
用于通过 .github/workflows/build-desktop.yml 触发桌面端多平台打包,并生成 GitHub draft release。
触发机制
pushtag 且 tag 匹配v*:自动构建 macOS/Windows/Linux 桌面包,并创建或更新 draft GitHub Release。workflow_dispatch:只手动构建并上传 Actions artifacts,不创建 GitHub Release。
正式发布桌面包时优先用 tag push,不要只手动跑 Action。
发布前检查
- 确认工作区状态:
git status --short
- 确认当前版本来源:
- npm/server 版本在
packages/server/package.json - desktop 包版本在 tag workflow 中由 tag 临时写入
packages/desktop/package.json - tag 必须是 semver 形式,例如
v0.5.2-beta.6
- 构建前本地至少验证:
pnpm --filter @agent-tower/server build
pnpm --filter @agent-tower/desktop run package:prepare
如改过 Linux metadata 或 Electron Builder 配置,再跑:
pnpm --filter @agent-tower/desktop run package:linux
触发 GitHub 自动打包
- 创建并推送 tag:
git tag vX.Y.Z
git push origin vX.Y.Z
如果 tag 已存在且需要重发,先和用户确认。不要擅自删除或强推 tag。
- 查看 workflow:
gh run list --workflow "Build Desktop" --limit 5
gh run watch <run-id>
- 查看产物:
gh run download <run-id> --dir desktop-artifacts
- 查看 draft release:
gh release view vX.Y.Z
GitHub Release 行为
tag push 成功后 workflow 会:
- 在
macos-latest构建 macOS arm64 DMG - 在
windows-latest构建 Windows x64 NSIS installer 和 portable exe - 在
ubuntu-latest构建 Linux x64 AppImage 和 deb - 上传 Actions artifacts,保留 14 天
- 创建或更新 draft GitHub Release,并上传所有平台产物
发布 draft release 前,检查产物齐全后再执行:
gh release edit vX.Y.Z --draft=false
预发布版本可标记 prerelease:
gh release edit vX.Y.Z --prerelease --draft=false
常见问题
- Prisma 类型错误:确认
packages/server/package.json的build会先跑pnpm run db:generate。 - Windows
cp不存在:server build 资产复制应使用 Node 脚本,不用 Unix-onlycp。 - Linux deb 报
Please specify project homepage:packages/desktop/package.json顶层需要homepage。 - Linux WM_CLASS warning:顶层
desktopName配合build.linux.syncDesktopName: true。 - macOS 包目前未签名/未公证;正式分发前需要 Developer ID signing/notarization。
- Windows 包目前未签名;正式分发前需要代码签名。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 104 lines · 63 tokens per session scan A 8a07ec2b069d
github-desktop-release is a skill published in the GitHub repository agent-tower/core (397 stars, last pushed yesterday), licensed Apache-2.0. It adds 63 tokens to every session and 799 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
github-desktop-release compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| github-desktop-releaseagent-tower/core | Skill | 397 | yesterday | Apache-2.0 | A | 63 | Claude Code, Codex |
| github-release-managementruvnet/RuView | Skill | 103k | yesterday | MIT | A | 27 | Claude Code |
| agent-github-modesruvnet/ruflo | Skill | 81k | yesterday | MIT | A | 21 | Claude Code |
| xberg-releasexberg-io/xberg | Skill | 9.5k | yesterday | MIT | A | 16 | Claude Code, Codex |
| factory-shipBuilderIO/skills | Skill | 4.6k | 4d ago | MIT | A | 28 | Claude Code |
| releaseprcompozy/compozy | Skill | 2.8k | yesterday | MIT | A | 53 | Claude Code, Codex |
| gitlab-devopsautomateyournetwork/netclaw | Skill | 715 | yesterday | Apache-2.0 | A | 67 | Claude Code, Codex |