harness-release

harness-release is a skill for Claude Code, Codex from Chachamaru127/claude-code-harness. It costs 66 tokens per session (6,831 once invoked), scanned A, original, MIT.

An automated release workflow for projects that use Keep a Changelog and GitHub. Keep a Changelog is a format for recording user-facing changes; GitHub Releases publish a version alongside a tag.

In plain words
What is it for?
Detecting version bumps, updating the changelog, committing and pushing changes, creating or updating a pull request, merging it, creating a tag, publishing a GitHub Release, and checking the resulting artifacts.
Why use it?
It turns a release into a checked sequence instead of a collection of manual steps. It also separates being ready for review from being ready to publish.

Skill for Claude CodeCodex

Written for Claude Code and Codex: allowed-tools in frontmatter, but also installed under .codex/. Also seen: names the AskUserQuestion tool; mentions Claude Code; mentions Codex.

Runs only inside its plugin — its command needs a path that Claude Code sets for a plugin’s own hooks and for nothing else. Install the plugin, not this.

Part of the claude-code-harness plugin — 25 skills, 5 commands, 5 agents, 27 hooks shipped together

About the project

Claude Code Harness is a development workflow for coding agents that organizes work into planning, implementation, review, synchronization, and release stages. It helps developers keep specifications, tests, independent reviews, and release evidence connected while using tools such as Claude Code, Codex CLI, Cursor, or Grok.

Chachamaru127/claude-code-harness · 3,091 stars · on GitHub

Install

Getting it into your agent

This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.

Claude Code
/plugin marketplace add Chachamaru127/claude-code-harness
Claude Code
/plugin install claude-code-harness

Made for: Claude Code, Codex.

Or install claude-code-harness, the plugin that ships this one along with the rest of its 25 skills, 5 commands, 5 agents, 27 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for harness-release

README.md
[![agentmods](https://agentmods.dev/badge/skills/chachamaru127/claude-code-harness/harness-release.svg)](https://agentmods.dev/skills/chachamaru127/claude-code-harness/harness-release)
Your own site
<a href="https://agentmods.dev/skills/chachamaru127/claude-code-harness/harness-release"><img src="https://agentmods.dev/badge/skills/chachamaru127/claude-code-harness/harness-release.svg" alt="Measured on agentmods" height="20"></a>
Per session 66 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,831 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00066 $0.06831
Opus 5 $0.00033 $0.03416
Sonnet 5 $0.00013 $0.01366
Haiku 4.5 $0.00007 $0.00683

Measured today against content hash b8bf8a6f7d90, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

harness-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

codex/.codex/skills/harness-release/SKILL.md · 386 lines

How it starts

The opening of the file, as written. The whole thing — 386 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Harness Release (汎用)

Keep a Changelog + GitHub を使うあらゆるプロジェクト向けの汎用リリース自動化スキル。

設計原則: 単一確認ゲート。ユーザーは 1 回だけ全体計画を見て承認する。承認後はファイル書き換え → commit → branch push → PR 作成/更新 → default branch へ merge → default branch 上で tag → GitHub Release までを中断なく実行する。

Release complete の定義: release は「tag と GitHub Release を作った」だけでは完了ではない。対象 work と release bump が default branch(通常 main)に merge 済みで、release tag が default branch 到達可能 commit を指し、GitHub Release がその tag を公開している状態を完了とする。

PR ready vs release ready

Harness V2 では PR closeout と release closeout を混同しない。

Gate 意味 必須条件 停止 lane
PR ready ブランチが review 可能で merge 判断できる harness-review APPROVE、focused tests PASS、evidence pack 完備(accepted/rejected findings、tests、release-preflight warnings 処理、residual risk) [lane:fast] / [lane:gate] はここで停止可
release ready 公開配布 path が preflight を通過 PR ready 条件 + version surface sync + tag + GitHub Release + CI/public artifact 検証 [lane:release] のみ
  • PR ready は harness-review APPROVE + evidence pack で判定する。harness-review から push / PR / merge はしない。
  • release ready は harness-release の Preflight / Post-Gate だけが判定する。version bump / tag / GitHub Release は release lane 専用。
  • local tests passed だけでは PR ready でも release ready でもない(not_observed != absent)。

Literal invocation note: この skill の入口は harness-release, /release, /release patch, /release --dry-run のような literal command をそのまま使う。

CC runtime hard floor との関係

Claude Code 2.1.183+ の runtime hard floor は GitHub CLI release publish 系コマンドを構造的に deny する (Anthropic 製品仕様、settings.jsonpermissions.ask で覆せない)。本 skill は publish 自体を実行せず、.github/workflows/release.yml (tag push trigger) に委譲する。skill は tag push までで責務を完了し、その後 scripts/release-verify-publish.sh で workflow による公開を verify する。

Revert 条件: CC が runtime hard floor に user explicit approval path を提供したら、Post-Gate に直接 publish step を戻すことを検討する。

Bare invocation contract

if $ARGUMENTS == "": → 「今までの作業をコミットし、PR/main 反映まで完了してリリースしたい」と解釈し、Review Gate 検出を実行する → 対象 work が 1 つに確定できる場合だけ Step 0 (Review Gate) へ自動進行する → 対象が不明または review state が無い場合は AskUserQuestion で選択肢を出してから進める

Read the full file on GitHub · 386 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +1 lines b8bf8a6f7d90
  2. 4d ago Changed · +8 lines f8378f4ed075
  3. 6d ago First seen · 377 lines · 66 tokens per session scan A 6cb34a54ea6c

Subscribe to this mod's changes

harness-release is a skill published in the GitHub repository Chachamaru127/claude-code-harness (3,091 stars, last pushed today), licensed MIT. It adds 66 tokens to every session and 6,831 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

ship

Ship workflow: detect + merge base branch, run tests, review diff, bump VERSION, update CHANGELOG, commit, push, create PR. (gstack).

garrytan/gstack · 35 tokens

agent-github-modes

Agent skill for github-modes - invoke with $agent-github-modes.

ruvnet/ruflo · 21 tokens

tutti-app-release

Set up, review, run, or debug external repositories that publish a Tutti workspace app through the reusable Tutti App Release GitHub Actions workflow. Use for caller workflows, tutti.app.json manifests, @tutti-os/app-release-tools, S3/CloudFront release hosting, latest.json, versions.json, catalog.json, catalog-only…

tutti-os/tutti · 80 tokens

publish

Publish the Octop Python package: cut a release branch from develop, bump version, update CHANGELOG, open a PR to main; after merge, Actions tag on main (PyPI / Docker Hub + GHCR) and sync main into develop. Use when the user asks to publish, release, bump version, cut a release, or run /publish.

TencentCloud/Octop · 74 tokens

seed-snapshot-release

Drives the snapshot-release flow for the current branch's PR. Posts a /snapshot comment on the PR if one isn't already there (with confirmation), waits for the Continuous Releases workflow to finish, and reports the tarball URLs from the resulting 📦 Snapshot Release comment. Use for both triggering and waiting …

daangn/seed-design · 144 tokens

releasepr

Adopt, configure, run, or troubleshoot compozy/releasepr in a consuming repository, including Actions, beta/stable/legacy plans, notes, dry-runs, and publication. Excludes pr-release internals and general versioning advice.

compozy/compozy · 53 tokens