dtctl: Skill for Claude Code

.agents/skills/dtctl-release/SKILL.md

dtctl-release is a skill for Claude Code, Codex from dynatrace-oss/dtctl. It costs 75 tokens per session (1,435 once invoked), scanned A, original, Apache-2.0.

Instructions for releasing dtctl through release-please, a tool that prepares version changes and release notes from Conventional Commits. A release requires manually starting the workflow, merging the release pull request, and starting the workflow again.

In plain words
What is it for?
Use it to prepare and publish a new dtctl version, understand a release pull request, or finish the two-stage release process.
Why use it?
They clarify why a release does not happen after an ordinary merge and remove the need to edit versions, changelogs, or tags by hand.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is dynatrace-oss/dtctl's own configuration. It tells Claude Code and Codex how to work on dtctl itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything dtctl configures →

not rated 182repo 3d ago A scan Socket: passSnyk: passSkillSpector: pass 75 tokens original Apache-2.0
Reuse

Borrowing it

Nothing to install: this file belongs to dynatrace-oss/dtctl. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/dynatrace-oss/dtctl/main/.agents/skills/dtctl-release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/dynatrace-oss/dtctl

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for dtctl-release

README.md
[![agentmods](https://agentmods.dev/badge/skills/dynatrace-oss/dtctl/dtctl-release.svg)](https://agentmods.dev/skills/dynatrace-oss/dtctl/dtctl-release)
Your own site
<a href="https://agentmods.dev/skills/dynatrace-oss/dtctl/dtctl-release"><img src="https://agentmods.dev/badge/skills/dynatrace-oss/dtctl/dtctl-release.svg" alt="Measured on agentmods" height="20"></a>
Per session 75 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,435 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Socket pass 16 Apr 2026
  • Snyk pass 16 Apr 2026
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00075 $0.01435
Opus 5 $0.00037 $0.00718
Sonnet 5 $0.00015 $0.00287
Haiku 4.5 $0.00007 $0.00144

Measured 8d ago against content hash 9bc8a31c6f87, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

dtctl-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/dtctl-release/SKILL.md · 83 lines

How it starts

The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.

dtctl Release Process (release-please)

dtctl releases use release-please but are triggered manuallynothing releases on ordinary merges to main. There is no manual version bump, no CHANGELOG.md to edit, and no tag to push by hand. The release notes and version are computed from the Conventional Commits since the last release.

How it works

The .github/workflows/release.yml workflow runs only when you trigger it (workflow_dispatch — the "Run workflow" button on the Actions tab, or gh workflow run). A full release is two dispatches with a merge in between:

  1. Dispatch #1 — the release-please job inspects the conventional commits since the last release and opens/updates a release PR titled like chore(main): release 0.31.0. That PR:
    • bumps .release-please-manifest.json,
    • bumps the fallback version in pkg/version/version.go (via the // x-release-please-version annotation),
    • and contains the pending release notes (in the PR body).
  2. Merge the release PR once you're happy with the version + notes.
  3. Dispatch #2 — release-please detects the merged release PR, creates the git tag (vX.Y.Z) and the GitHub Release with generated notes, and release_created == true gates the goreleaser job, which builds cross-platform binaries, signs checksums with cosign, generates SBOMs with syft, attaches everything to the release (without overwriting the notes — release.mode: keep-existing), and pushes the updated Homebrew cask to dynatrace-oss/homebrew-tap.

⚠️ Don't forget Dispatch #2: merging the release PR alone does not publish anything, because the workflow only runs on manual dispatch.

There is no CHANGELOG.md file in the repo by design — the GitHub Release is the canonical changelog (skip-changelog: true in release-please-config.json).

Version bumps are determined by commit type

Commit prefix Bump (pre-1.0) Example
feat: MINOR 0.30.3 → 0.31.0
fix: / perf: PATCH 0.30.3 → 0.30.4
feat!: / fix!: or BREAKING CHANGE: footer MINOR (pre-1.0) 0.30.3 → 0.31.0
docs: / test: / chore: / ci: / refactor: no release on its own

Read the full file on GitHub · 83 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 83 lines · 75 tokens per session scan A 9bc8a31c6f87

Subscribe to this mod's changes

dtctl-release is a skill published in the GitHub repository dynatrace-oss/dtctl (182 stars, last pushed 3d ago), licensed Apache-2.0. It adds 75 tokens to every session and 1,435 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.