EngramGraph: Skill for Claude Code

.agents/skills/deploy-assistant/SKILL.md

deploy is a skill for Claude Code from AsiaOstrich/EngramGraph. It costs 86 tokens per session (1,806 once invoked), scanned C, original, MIT.

A guide for deploying software without CI/CD platforms such as GitHub Actions or GitLab CI. It uses checks, health tests, version controls, and recovery steps to guide deployments to servers or Docker Compose environments.

In plain words
What is it for?
Use it to plan deployments over SSH and rsync or Docker Compose, configure health checks, and prepare rollback scripts.
Why use it?
It helps reduce wrong or incomplete deployments when automated pipelines are unavailable. It also provides a plan for checking a deployment and recovering after failure.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: installed under .agents/ (shared by several agents).

This is AsiaOstrich/EngramGraph's own configuration. It tells Claude Code how to work on EngramGraph itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything EngramGraph configures →

Needs its repository: it reads a path above its own folder, which exists only inside the repository. The line is **Language**: English | [繁體中文](../../locales/zh-TW/skills/deploy-assistant/SKILL.md).

Reuse

Borrowing it

Nothing to install: this file belongs to AsiaOstrich/EngramGraph. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/AsiaOstrich/EngramGraph/main/.agents/skills/deploy-assistant/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/AsiaOstrich/EngramGraph

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for deploy

README.md
[![agentmods](https://agentmods.dev/badge/skills/asiaostrich/engramgraph/deploy-assistant/github.svg)](https://agentmods.dev/skills/asiaostrich/engramgraph/deploy-assistant)
Your own site
<a href="https://agentmods.dev/skills/asiaostrich/engramgraph/deploy-assistant"><img src="https://agentmods.dev/badge/skills/asiaostrich/engramgraph/deploy-assistant/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for deploy

Your own site · 80×15
<a href="https://agentmods.dev/skills/asiaostrich/engramgraph/deploy-assistant"><img src="https://agentmods.dev/badge/skills/asiaostrich/engramgraph/deploy-assistant.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 86 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,806 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00086 $0.01806
Opus 5.5 $0.00034 $0.00722
Sonnet 5.5 $0.00017 $0.00361
Haiku 4.5 $0.00009 $0.00181

Measured 14d ago against content hash c6fa47ec8734, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

deploy scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Downloads and executes remote codehighSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

@curl -s $${HEALTH_URL:-http://localhost/health} | python3 -m json.tool 2>/dev/null || echo "Health check failed"

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

RESPONSE=$(curl -sf --max-time 10 "$HEALTH_URL" 2>/dev/null) && break
.agents/skills/deploy-assistant/SKILL.md · 187 lines

How it starts

The opening of the file, as written. The whole thing — 187 lines — stays where its author put it; the contents beside it link to each section on GitHub.

No-CI/CD Deploy Assistant | 無 CI/CD 部署助手

Language: English | 繁體中文

Guide reliable deployments in environments without GitHub Actions or GitLab CI, using a three-layer architecture: prevent errors, verify correctness, recover fast.

引導無 CI/CD 平台環境下的可靠部署,採用三層架構:防錯、驗證、快速回復。

Three-Layer Architecture | 三層部署架構

Layer 1: Prevent Wrong Deployments   Layer 2: Verify Correctness   Layer 3: Fast Recovery
  set -euo pipefail                    Smoke Test + /health           Blue-Green switching
  Version tag enforcement              Version number comparison      rollback.sh < 30s
  deploy.lock concurrency guard        Auto-rollback on failure

Interactive Questionnaire | 引導式問答

Question Options Impact
Project type node / python / go / docker Build command
Deploy target SSH+rsync / Docker Compose Transfer method
Blue-Green support yes / no rollback.sh generation
Health check URL URL input verify.sh target
Version source VERSION file / package.json / git tag Version comparison logic

Generated Script Set | 生成的腳本組

deploy.sh — Main Deploy Script

#!/usr/bin/env bash
set -euo pipefail

LOCK_FILE="/tmp/deploy.lock"
trap "rm -f $LOCK_FILE" EXIT

# Concurrency guard | 防並發
if [ -f "$LOCK_FILE" ]; then
  echo "❌ Deploy in progress (PID: $(cat $LOCK_FILE))"
  exit 1
fi
echo $$ > "$LOCK_FILE"

# Version tag enforcement | 版本 tag 強制
CURRENT_TAG=$(git describe --exact-match --tags HEAD 2>/dev/null || echo "")
if [ -z "$CURRENT_TAG" ]; then
  echo "❌ No version tag on HEAD. Run: git tag vX.Y.Z && git push --tags"
  exit 1
fi

echo "[1/4] Running tests..."
# {TEST_COMMAND}

echo "[2/4] Building artifact..."
# {BUILD_COMMAND}

echo "[3/4] Syncing to server..."
rsync -avz --delete ./dist/ {USER}@{SERVER}:/app/

echo "[4/4] Verifying deployment..."
./verify.sh || { echo "Verification failed, rolling back..."; ./rollback.sh; exit 1; }

echo "{\"timestamp\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"version\":\"$CURRENT_TAG\",\"operator\":\"$(whoami)\",\"result\":\"success\"}" >> /var/log/deployments.jsonl
echo "✅ Deploy successful: $CURRENT_TAG"

Read the full file on GitHub · 187 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 14d ago First seen · 187 lines · 86 tokens per session scan C c6fa47ec8734

Subscribe to this mod's changes

deploy is a skill published in the GitHub repository AsiaOstrich/EngramGraph (3 stars, last pushed today), licensed MIT. It adds 86 tokens to every session and 1,806 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-16.

Related

Other skills, from other repositories

kivgraph

Use Kivgraph's local MCP server to search symbols, read their source, and follow references, dependencies, cross-repository consumers and graph status in the indexed code graph.

Luqueee/kivgraph · 39 tokens

mushroom

Live graph memory for agents — query and create entities, derive relationships by rule, explain why two things are associated, read the graph at a past commit, ask what a change would do, and answer as one role. Trigger on: memory, remember, recall, relationship, entity, association, why are X and Y related, as of…

MatthewSherlin/mushroomdb · 0 tokens

omnigraph

Operate OmniGraph graphs and deployments. Use for .pg schemas, .gq queries, OmniGraph CLI commands, file:///s3:///az:// graph URIs, cluster.yaml, operator config, bearer-authenticated servers, graph-backed knowledge or memory, Blob values, embeddings, branches, commits, and change feeds. Apply especially before schema…

ModernRelay/omnigraph · 94 tokens

code-graph

This skill should be used when understanding code structure, finding dependencies between functions/classes, tracing call graphs, or exploring code relationships. Trigger phrases include 'code graph', 'call graph', 'who calls', 'what calls', 'find dependencies', 'code structure', 'inheritance', 'find paths'.

FalkorDB/code-graph · 64 tokens

usage

Query LeanKG knowledge graph for code understanding. Use when exploring a codebase, finding functions, tracing dependencies, or calculating impact radius.

FreePeak/LeanKG · 27 tokens

codestory-grounding

Use when discovering repository structure, tracing relationships, analyzing change impact, or validating CodeStory retrieval or an installed plugin through the CodeStory plugin MCP. Skip only for bounded inspection or editing of named files that does not require those operations.

TheGreenCedar/CodeStory · 52 tokens