Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/dixus/claudeframework/shipnpx skills add dixus/claudeframework --skill shipgit clone --depth 1 https://github.com/dixus/claudeframeworkWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00028 | $0.07205 |
| Opus 5 | $0.00014 | $0.03603 |
| Sonnet 5 | $0.00006 | $0.01441 |
| Haiku 4.5 | $0.00003 | $0.00720 |
Grade A, and why
ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 454 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Orchestrate the full spec-to-commit pipeline for the feature described in $ARGUMENTS or in .claude/input/.
--dry-run mode: If $ARGUMENTS contains --dry-run, run only Steps 1–2 (questions + spec), then print a scope report and stop. No branch, no implementation, no commits. Use this to preview complexity and scope before committing to a full pipeline run.
--no-finalize mode: If $ARGUMENTS contains --no-finalize, run the full pipeline (spec → implement → review → fix → commit) but skip Step 7 entirely — neither gate nor push nor state change. The feature stays on its branch with all commits applied and checks passing, but is not merged to main and the work item stays in its current state. Used by /fleet to manage merges centrally.
--auto-finalize mode: If $ARGUMENTS contains --auto-finalize, skip the Step 7a finalize gate and go straight to push + state transition. Use only when you trust the pipeline output without a manual smoke-test (doc-only commits, trivial refactors, hotfixes under time pressure). Default is the gated flow — the user sees a summary and must confirm before anything is pushed or the ticket state changes.
Architecture: The main session is a thin orchestrator only — it never reads code files or accumulates implementation context. Each phase runs in a dedicated subagent with a clean context. The spec file, review file, and git diff are the handoff mechanism between phases.
Progress updates: After each subagent returns, print a one-line status update so the user can track progress. Use this format:
✓ Step N — <phase> complete. <key detail from subagent summary>
Examples: ✓ Step 2 — Spec complete. 7 files, 3 new. · ✓ Step 3 — Implementation complete. All checks pass. · ✓ Step 4 — Review: pass with fixes (2 major). · ✓ Step 4 — Fix cycle 1 complete. 2/2 issues resolved.
Main session (orchestrator — reads summaries only)
├── Step 0: branch setup → creates ticket branch (or stays on current branch)
├── Step 0b: ticket resolution → loads work item + comments from tracker (if configured), sets state
├── Step 1b: historical patterns → reads metrics-pipeline.csv → builds spec guidance
├── Subagent A: spec [opus] → writes .claude/specs/<name>.md (informed by patterns)
├── Step 2b: decision review → reads spec "Decisions made by Claude" → user approval
│
├── Subagent B: implement [opus] → single subagent, returns summary
├── Subagent C: review [opus] → writes .claude/reviews/<name>-review.md
├── Subagent D: fix [opus if rework, sonnet if fixes]→ loop back to C
├── Step 4b: lesson graduation → graduates mature lessons → CLAUDE.md
├── Step 4c: integration check [opus] → cross-phase glue review (phased only)
├── Step 5: final verify → typecheck → lint → tests → build
├── Step 5b: changelog entry → writes changelog/<branch>.md (per-ticket, merge-conflict-free)
├── Subagent E: commit [sonnet]→ atomic commits on feature branch
├── Step 6b: tracker feedback → posts non-obvious context to work item (sparingly)
├── Step 7a: finalize gate → show summary + test hints, wait for user confirm
└── Step 7b: push + finalize → pushes branch to origin, updates ticket state
Step 0 — Branch setup (orchestrator)
Skip this step entirely if --dry-run is set — dry-run never creates branches.
Before doing anything else:
- Read project branch conventions: Check if
.claude/rules/branch-management.mdexists. If it does, read it and note the branch naming convention. This determines how the branch will be named in step 0.4 below. - Check the current branch with
git branch --show-current - If already on a feature branch (not
mainormaster), stay on it — this is the working branch. Note its name. Try to parse it for a ticket ID (see branch-management.md for the pattern). Do NOT switch to main to create a new branch. Create a checkpoint from the current HEAD:git branch checkpoint/<spec-name> - If on
mainormasterand the project requires a ticket-based branch name (from branch-management.md), setbranch_pending = true— defer branch creation until after Step 1 where the ticket metadata will be collected. If no project convention exists, run:git checkout -b feat/<spec-name>where<spec-name>is derived from $ARGUMENTS or the most recently modified file in.claude/input/. Then create checkpoint:git branch checkpoint/<spec-name> - Confirm the branch (or note that it is pending) — all subsequent subagent commits will land here
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 454 lines · 28 tokens per session scan A edc573470aa2
ship is a skill published in the GitHub repository dixus/claudeframework (10 stars, last pushed 4mo ago), licensed MIT. It adds 28 tokens to every session and 7,205 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
git-workflow-and-versioning
Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump…
prowler-commit
Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.
git-commit
Generate well-formatted git commit messages following conventional commit standards.
git-workflow
This skill should be used when the user asks to "create git commit", "manage branches", "follow git workflow", "use Conventional Commits", "handle merge conflicts", or asks about git branching strategies, version control best practices, pull request workflows. Provides comprehensive Git workflow guidance for team…
commits
Use this skill whenever the user asks to commit changes, write or fix a commit message, amend or rename a commit, or do a workflow that includes committing in the IntelliJ repository. This is a thin repo-specific overlay: use IntelliJ commit format, write full commit messages by default, and keep requested suffixes…
contributing
How to contribute to evlog, covering commit and PR conventions, changesets, the Definition of Done, testing rules, and the authored skills that walk through building a new adapter, enricher, framework integration, or map rule. Load this for any question about contributing, opening a PR, or adding something to the…