agent-infra: Skill for Claude Code

.agents/skills/release/SKILL.md

release is a skill for Claude Code, Codex from fitlab-ai/agent-infra. It costs 27 tokens per session (467 once invoked), scanned A, original, MIT.

A release workflow that prepares a software version, shows its current release facts, asks for approval, and publishes it remotely.

In plain words
What is it for?
Use it to validate a semantic version number, inspect release readiness, prepare missing release steps, publish approved changes, and review the final result.
Why use it?
It adds checks before release and requires explicit approval of the current snapshot, reducing the chance of publishing an unverified or outdated version.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is fitlab-ai/agent-infra's own configuration. It tells Claude Code and Codex how to work on agent-infra itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything agent-infra configures →

Reuse

Borrowing it

Nothing to install: this file belongs to fitlab-ai/agent-infra. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/fitlab-ai/agent-infra/main/.agents/skills/release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/fitlab-ai/agent-infra

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for release

README.md
[![agentmods](https://agentmods.dev/badge/skills/fitlab-ai/agent-infra/release.svg)](https://agentmods.dev/skills/fitlab-ai/agent-infra/release)
Your own site
<a href="https://agentmods.dev/skills/fitlab-ai/agent-infra/release"><img src="https://agentmods.dev/badge/skills/fitlab-ai/agent-infra/release.svg" alt="Measured on agentmods" height="20"></a>
Per session 27 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 467 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00027 $0.00467
Opus 5 $0.00014 $0.00234
Sonnet 5 $0.00005 $0.00093
Haiku 4.5 $0.00003 $0.00047

Measured 7d ago against content hash 3efc3cb47cdb, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/release/SKILL.md · 53 lines

What it actually says

版本发布

在单次调用中准备发布、展示最新事实快照并请求一次远端发布授权。状态由外部事实重建;具体以 Git、代码托管平台与包发布渠道为准,不维护第二套 journal。

1. 验证输入与人工检查点

验证唯一参数 {version} 是规范 SemVer,并确认 entropy 人工检查点已满足。为此读取最新 entropy 报告;报告存在未处置高风险项时停止,不得替用户批准发布。

2. 准备并检查发布事实

agent-infra-internal release-workflow inspect {version}

blocked 表示外部事实不可确认,不得当作 missing。未 prepared 时执行 prepare 并重新 inspect;已准备或部分发布时复用当前事实。unknown 必须 blocked。

agent-infra-internal release-workflow prepare {version} --entropy-report {path}

prepare 后必须重新 inspect;不得重复已满足动作。

3. 展示快照并确认

展示最新 snapshot。只有当前会话中针对该快照的无歧义明确肯定答复才授权发布;否定、调整、疑问、歧义或中断均停止,不得 publish。快照变化后重新展示并重新确认。

4. 发布并复核

agent-infra-internal release-workflow publish {version}

逐 ref 普通 push;部分成功可重放,禁止 force push。core 保留已成功事实并返回 degraded,重跑只补未满足事实。操作后重新 inspect;unknown 必须 blocked。

5. 输出事实摘要

完整发布后渲染携带版本的下一步,不显示内部 action,也不直接跳到 post-release:

agent-infra-internal agent-client next-steps \
  --skill create-release-note \
  --version {version}

输出完整快照和 helper 的非空 stdout。

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 53 lines · 27 tokens per session scan A 3efc3cb47cdb

Subscribe to this mod's changes

release is a skill published in the GitHub repository fitlab-ai/agent-infra (83 stars, last pushed yesterday), licensed MIT. It adds 27 tokens to every session and 467 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

release-expert

Multi-repo release coordination: version alignment, RC lifecycle, release waves, rollback planning. Use when saying "release", "version alignment", or "cut an RC".

anton-abyzov/specweave · 0 tokens

release

Prepare code for release (version bumps, changelog, README updates) and create an annotated tag to trigger the GoReleaser workflow.

jrswab/axe · 30 tokens

agentplane-release-and-packaging-operator

Use when preparing, validating, publishing, auditing, or recovering an Agentplane release, especially package build ordering, version parity, npm/GitHub/GHCR/external distribution publication, public install smoke tests, hosted publish evidence, or release CI failures.

basilisk-labs/agentplane · 60 tokens

ccb-github

Maintain this CCB project's GitHub-facing release and npm publication surface. Use when preparing, publishing, auditing, or fixing CCB releases; updating README.md, README/zh.md, localized README files, CHANGELOG.md, VERSION, package.json, GitHub release notes/assets, repository description/topics, npm registry state…

SeemSeam/claude_codex_bridge · 76 tokens

release

Release Aigon — push to origin, cut a version+tag, or publish to npm. Wraps scripts/ship.js with CHANGELOG draft + dry-run preview. Triggers when the user types "/release", "/push", "/ship", or says "ship a release", "publish a beta", "cut a version", "push to origin", "release X to npm".

jayvee/aigon · 79 tokens

pypi-release

This skill should be used when releasing tunacode-cli to PyPI. It keeps the existing local release checks, then hands the actual PyPI upload to a GitHub Actions workflow that uses the repository's PYPIAPITOKEN secret.

alchemiststudiosDOTai/tunacode · 52 tokens