agentmods.dev

ship

ship is a skill for Claude Code, Codex from Brad-Edwards/aptl. It costs 33 tokens per session (882 once invoked), scanned A, original, MIT.

A release workflow for the current Git branch, including pull requests, GitHub Actions checks, SonarCloud quality checks, code review, security review, fixes, and merging.

In plain words
What is it for?
Use it to create or inspect a pull request, monitor CI, review failed logs, check SonarCloud results, handle review findings, and merge the branch when everything is ready.
Why use it?
It gathers the checks needed before merging into one repeatable process and follows failures through diagnosis and correction. It assumes the code is already committed and pushed.

Skill for Claude CodeCodex

not rated 24 yesterday A scan 33 tokens original MIT
View the source file Brad-Edwards/aptl
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/brad-edwards/aptl/ship
Any agent
npx skills add Brad-Edwards/aptl --skill ship
Clone the repo
git clone --depth 1 https://github.com/Brad-Edwards/aptl

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ship

README.md
[![agentmods](https://agentmods.dev/badge/skills/brad-edwards/aptl/ship.svg)](https://agentmods.dev/skills/brad-edwards/aptl/ship)
Your own site
<a href="https://agentmods.dev/skills/brad-edwards/aptl/ship"><img src="https://agentmods.dev/badge/skills/brad-edwards/aptl/ship.svg" alt="Measured on agentmods" height="20"></a>
Per session 33 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 882 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00033 $0.00882
Opus 5 $0.00016 $0.00441
Sonnet 5 $0.00007 $0.00176
Haiku 4.5 $0.00003 $0.00088

Measured 5d ago against content hash acecd8311b89, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/ship/SKILL.md · 88 lines

How it starts

The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Ship Current Branch

Assumes code is already committed and pushed. Handles: PR creation, CI monitoring, SonarCloud, code review, security review, fixing all issues, and merging.

IMPORTANT: NEVER include Co-Authored-By, "Generated with Claude Code", or any Claude/AI attribution in commit messages, PR descriptions, or any other artifacts.

Phase 1: Create PR

  1. Determine the current branch: git branch --show-current
  2. Check if a PR already exists: gh pr list --head <branch> --json number,url
  3. If no PR exists, create one: 
    gh pr create --base dev --title "<concise title>" --body "<description>"
  4. Note the PR number.

Phase 2: CI Monitor

  1. Find the latest workflow run: gh run list --branch <branch> --limit 1 --json status,conclusion,databaseId
  2. If the run is in progress, watch it: gh run watch <id>
  3. If it failed:
    • Get failed logs: gh run view <id> --log-failed
    • Diagnose and fix the issue.
    • git add, git commit, git push.
    • Go back to step 1.
  4. If it succeeded, proceed.

Phase 3: SonarCloud Check

  1. Wait 60 seconds for SonarCloud analysis to propagate.
  2. Use get_project_quality_gate_status with project key Brad-Edwards_aptl to check the quality gate.
  3. Use search_sonar_issues_in_projects to find new issues on the current branch.
  4. If issues found:
    • Fix them.
    • git add, git commit, git push.
    • Re-run Phase 2.
  5. If clean, proceed.

Phase 4: Code Review

CRITICAL: You MUST use the Skill tool to invoke the built-in review skill.

  1. Merge dev into the current branch: git fetch origin dev && git merge origin/dev
  2. If there are merge conflicts, resolve them, commit, and push.
  3. Call the Skill tool with skill="review" to invoke the real built-in code review.
  4. After the review completes, fix ALL issues it identified.
    • Do NOT defer ANY issues.
    • Do NOT categorize issues as "low priority" to avoid work.
    • You are an LLM. You have no time constraints. Fix everything.
    • The ONLY reason to stop and escalate to the user is if a fix requires a significant architectural change touching 5+ files outside the current feature scope.
  5. After fixing, re-read all findings and confirm each one was addressed.

Read the full file on GitHub · 88 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 88 lines · 33 tokens per session scan A acecd8311b89

Subscribe to this mod's changes

ship is a skill published in the GitHub repository Brad-Edwards/aptl (24 stars, last pushed yesterday), licensed MIT. It adds 33 tokens to every session and 882 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Code reviewGit and workflowReleasesagentsblue-teamcyber-rangecybersecuritycybersecurity-toolsinfosec
Related

Other skills, from other repositories

cut-release

Interactive walkthrough for cutting a new release of Huntable CTI Studio. Use this skill whenever the user says "cut a release", "ship a release", "tag a version", "bump the version", "new release", "do the release", "release vX.Y.Z", "ship v5.4.0", "time to release", or otherwise signals they want to move code from…

dfirtnt/Huntable-CTI-Studio · 136 tokens

minor-release-highlights

Proposes 2–3 high-level feature-set themes for a minor or point release compared to the previous minor—user-facing capability or UX shifts, not patches or commit lists. Use when cutting release notes, tagging a minor/point version, summarizing “what changed since x.y.0”, or when the user asks for dot/minor release…

dfirtnt/Huntable-CTI-Studio · 77 tokens

Blue Team Defense & Hardening

System hardening, detection engineering, security baseline monitoring, patch management, defense-in-depth architecture, and security posture improvement.

Masriyan/Claude-Code-CyberSecurity-Skill · 30 tokens

automating-devops

DevOps knowledge reference covering Git workflows, testing strategies, DevSecOps, release pipeline orchestration (release.yml, multi-arch images, cosign integration), CI/CD pipelines, database management, observability, and performance optimization. Use when working with Git, CI/CD, release pipelines, ghcr image…

telagod/code-abyss · 76 tokens

create-huntable-agent

Add a new extraction sub-agent to Huntable CTI Studio as a first-class peer of CmdlineExtract, ProcTreeExtract, HuntQueriesExtract, RegistryExtract, ServicesExtract, and ScheduledTasksExtract. Use this skill whenever the user asks to "add a new agent", "create a sub-agent", "wire up a new extractor", "add a new…

dfirtnt/Huntable-CTI-Studio · 129 tokens

codebase-test-trueup

Audit test coverage gaps and generate unit tests to close them. Use when the user says "test trueup", "coverage gaps", "test coverage audit", "fill coverage", "write missing tests", "backfill tests", "scope tests", "test what I changed", or any request to identify and fill test gaps. Three modes: audit (report only)…

dfirtnt/Huntable-CTI-Studio · 96 tokens