A release workflow for the corezoid-ai-plugin project that prepares a new tagged software version through six defined phases.

Use it when cutting a release, bumping the version, or creating a tag. It follows the project's RELEASE_CHECKLIST.md and expects approval between phases.

It helps keep version numbers, marketplace files, plugin manifests, and the changelog consistent when publishing a release.

release — Skill for Claude Code and Codex by corezoid: A release workflow for the corezoid-ai-plugin project that prepares…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/corezoid/corezoid-ai-plugin/release

Any agent

npx skills add corezoid/corezoid-ai-plugin --skill release

Clone the repo

git clone --depth 1 https://github.com/corezoid/corezoid-ai-plugin

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/corezoid/corezoid-ai-plugin/release.svg)](https://agentmods.dev/skills/corezoid/corezoid-ai-plugin/release)

Your own site

<a href="https://agentmods.dev/skills/corezoid/corezoid-ai-plugin/release"><img src="https://agentmods.dev/badge/skills/corezoid/corezoid-ai-plugin/release.svg" alt="Measured on agentmods" height="20"></a>

Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,673 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00000	$0.02673
Opus 5	$0.00000	$0.01337
Sonnet 5	$0.00000	$0.00535
Haiku 4.5	$0.00000	$0.00267

Measured 4d ago against content hash a52bf7fa47af, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/release/SKILL.md · 191 lines

How it starts

The opening of the file, as written. The whole thing — 191 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Release skill

This skill prepares a new tagged release of corezoid-ai-plugin. It runs through six phases in order. Do not skip phases, and do not collapse them — the user expects to see and approve each one before the next begins.

Why a dedicated skill

A release of this plugin touches six separate manifest files (Claude, Codex, Kiro plugin manifests; two marketplace manifests; and POWER.md frontmatter) plus the changelog. Forgetting any one of them ships a broken or inconsistent release: marketplace listings disagree about the version, Codex/Kiro install the wrong build, or POWER.md — which is attached to the GitHub Release artifact set — advertises a stale version. The single source of release truth for this repo is RELEASE_CHECKLIST.md — this skill executes that checklist programmatically so nothing is missed.

The six phases

Phase 1 — Inspect what changed since the last tag

Goal: understand and summarise everything that has landed since the previous release.

Run, in parallel:

git fetch --tags --quiet
git describe --tags --abbrev=0                         # the last released tag, e.g. v2.3.9
git log <last-tag>..HEAD --pretty=format:'%h %s'       # commit subjects since that tag
git diff --stat <last-tag>..HEAD                       # files touched, magnitude of change
git status --short                                     # uncommitted work that may need to ship in this release

Then read the actual diff for any commit subjects that are vague or for any non-trivial file changes — commit subjects alone often understate what shipped. Pay particular attention to:

New skills under plugins/corezoid/skills/ (added directories).
MCP server changes in plugins/corezoid/mcp-server/ (new tools, schema changes, breaking behaviour).
Docs changes in plugins/corezoid/docs/ and root-level docs (README.md, SECURITY.md, CLAUDE.md).
CI / workflow changes in .github/.

If git status shows uncommitted changes, ask the user whether those should be part of this release or stay out of it. Don't assume — pending edits are sometimes the whole point of the release and sometimes unrelated work.

Read the full file on GitHub · 191 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 191 lines · 0 tokens per session scan A a52bf7fa47af

Subscribe to this mod's changes

release is a skill published in the GitHub repository corezoid/corezoid-ai-plugin (73 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 2,673 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Git and workflow api-orchestration codex codex-plugin corezoid developer-tools mcp

watch

File sentinel that monitors the working directory for changes and marker comments, then auto-triggers appropriate skills. Poll-based via git diff against the last scan commit. Writes intake items for batch processing and routes marker actions through /do. Use for automatic reactions to file changes; do NOT use for…

SethGammon/Citadel · 70 tokens

review

5-pass structured code review — correctness, security, performance, readability, consistency.

SethGammon/Citadel · 17 tokens

live-preview

Mid-build visual verification loop. Takes screenshots of components during construction, not just after. Catches visual regressions and invisible features before they compound. Requires Playwright or similar screenshot tool.

SethGammon/Citadel · 40 tokens

marshal

Meta-orchestrator that takes any direction — broad, specific, or vague — and autonomously chains skills and context into actionable work. Gathers context from codebase, docs, and memory. Only asks the user when it genuinely cannot proceed. Single-session orchestrator.

SethGammon/Citadel · 56 tokens

wiki

Markdown-first knowledge base where the LLM acts as librarian. Ingests raw sources, compiles and interlinks topic files, self-maintains an index. No vector DB or embeddings required -- uses LLM-native navigation over structured markdown up to 400K words.