prospec: Skill for Claude Code

.agents/skills/release/SKILL.md

release is a skill for Claude Code, Codex from benwu95/prospec. It costs 71 tokens per session (3,859 once invoked), scanned A, original, MIT.

A skill for publishing a new prospec GitHub release by updating version strings, creating a tag, and writing release notes.

In plain words
What is it for?
Use it to release a version from a clean main branch after its changes are merged and archived. It records the release in the established English format.
Why use it?
It provides the project's required release process and checks that the release is ready to trigger the workflow that builds downloadable binaries.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: reads .claude/ paths; mentions CLAUDE.md; installed under .agents/ (shared by several agents).

This is benwu95/prospec's own configuration. It tells Claude Code and Codex how to work on prospec itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything prospec configures →

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is node dist/cli-bundle.js --version # must print X.Y.Z.

Reuse

Borrowing it

Nothing to install: this file belongs to benwu95/prospec. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/benwu95/prospec/main/.agents/skills/release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/benwu95/prospec

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for release

README.md
[![agentmods](https://agentmods.dev/badge/skills/benwu95/prospec/release/github.svg)](https://agentmods.dev/skills/benwu95/prospec/release)
Your own site
<a href="https://agentmods.dev/skills/benwu95/prospec/release"><img src="https://agentmods.dev/badge/skills/benwu95/prospec/release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for release

Your own site · 80×15
<a href="https://agentmods.dev/skills/benwu95/prospec/release"><img src="https://agentmods.dev/badge/skills/benwu95/prospec/release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 71 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,859 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00071 $0.03859
Opus 5.5 $0.00028 $0.01544
Sonnet 5.5 $0.00014 $0.00772
Haiku 4.5 $0.00007 $0.00386

Measured 9d ago against content hash 651be08d9724, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/release/SKILL.md · 275 lines

How it starts

The opening of the file, as written. The whole thing — 275 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Release Skill

Cut a new prospec release from main: bump the version strings, create the tag, and publish GitHub release notes in the house format. Publishing the release (published event) triggers .github/workflows/release.yml, which compiles the multi-platform standalone binaries and attaches them as compressed assets — so this skill's job is the version bump + notes, not the build.

Language

The release notes, commit message, and everything this skill writes are in English — a release is trust-zone / public-facing technical output, exempt from the Traditional Chinese change-artifact rule (see prospec/CONSTITUTION.md → Language Policy, mirrored in AGENTS.md). Talk to the user in their language; write the artifacts in English.

Preconditions — do not release until all hold

  1. All PRs for this version are merged to main and main is checked out with a clean tree (git status). gh pr list --state open --base main is empty. A release is cut from main, never a feature branch.

  2. Each change is archived (/prospec-archive) — REQs graduated, Knowledge synced, summary written. prospec status reports no in-progress changes. The release notes' Dogfood section reports this; it must already be true.

  3. Counts are already synced. pnpm counts runs as the last step of each feature commit, not here — READMEs / index.md / module READMEs already carry the right test/skill counts. Do not run pnpm counts during the bump. (See memory: counts are generated by sync-counts.ts.)

  4. Green locally with the current CI/release gates. Run the coverage suite once, then reuse its explicit JSON report for the factual-count check so the suite is not run twice:

    pnpm test:coverage
    pnpm typecheck
    pnpm lint
    pnpm counts:check --from vitest-report.json
    pnpm agents:check
    pnpm knowledge:check
    prospec check --strict
    pnpm bundle
    

    coverage/ and vitest-report.json on disk may be stale; only figures from this invocation are release evidence. knowledge:check may honestly skip when the release-only diff touches no module-owned source — report that result rather than manufacturing work. Capture the numbers for the "Quality & tests" section. Read prospec check WARNs by type, not as one bucket:

    • knowledge-health (stale module README) — almost always a prior change's archive that changed a module's source but never touched its README (drift compares git commit times). Fix it before releasing: sync + commit that module README so the notes can honestly claim a green check. Then confirm the fix didn't tip knowledge-size over the L2 per-module budget (this project overrides it to 2000 tokens in .prospec.yaml; the shipped default is 1000) — if it did, trim the README back under budget (net-neutral) rather than accept a new WARN.
    • knowledge-size budget WARN that pre-exists and is deliberate (the SC-002 signal) may be reported as such, mirroring how 0.5.2 framed it — do not thrash the README to chase it away.

Read the full file on GitHub · 275 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago Changed · +6 lines 651be08d9724
  2. 27d ago Changed · +1 lines 98ebc11c620b
  3. 28d ago Changed · +13 lines 0e59b0306ea7
  4. 2mo ago Changed · +59 lines f6a4252f8a07
  5. 2mo ago First seen · 196 lines · 71 tokens per session scan A 4aa8bd8ebb84

Subscribe to this mod's changes

release is a skill published in the GitHub repository benwu95/prospec (6 stars, last pushed yesterday), licensed MIT. It adds 71 tokens to every session and 3,859 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

release compared with skills from other repositories

release next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
releasebenwu95/prospecSkill6yesterdayMITA71Claude Code, Codex
shipfiratcand/forgeSkill143mo agoMITA29Claude Code, Codex
releaseYeachan-Heo/oh-my-claudecodeSkill41kyesterdayMITA27Claude Code
gsd-complete-milestoneopen-gsd/gsd-coreSkill11kyesterdayMITA16Claude Code
comet-archiverpamis/cometSkill3.3kyesterdayMITA34Codex
comet-releaserpamis/cometSkill3.3kyesterdayMITA65Claude Code, Codex
comet-safe-deliveryrpamis/cometSkill3.3kyesterdayMITA78Claude Code, Codex