atlas-publish

atlas-publish is a skill for Claude Code from fledgeling-co/fledgeling-plugins. It costs 281 tokens per session (4,710 once invoked), scanned A, original, MIT.

A release workflow for the Atlas app that turns open code changes into a draft update for testing or review. It supports either an over-the-air JavaScript update or an App Store app build.

In plain words
What is it for?
Preparing Atlas releases for TestFlight, the App Store, or an over-the-air update. It is for teams that need a registered draft release ready for a final human decision.
Why use it?
It gathers the release steps in one process, including merging code, creating builds, uploading files, and recording release data. It stops before the update is sent to users.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: mentions CLAUDE.md; mentions subagents; mentions Claude Code.

Part of the atlas-publish plugin — 1 skill shipped together

Good fit Preparing Atlas releases for TestFlight, the App Store, or an over-the-air update. It is for teams that need a registered draft release ready for a final human decision.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/fledgeling-co/fledgeling-plugins/atlas-publish
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add fledgeling-co/fledgeling-plugins --skill atlas-publish
Clone the repo
git clone --depth 1 https://github.com/fledgeling-co/fledgeling-plugins

Made for: Claude Code.

Or install atlas-publish, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for atlas-publish

README.md
[![agentmods](https://agentmods.dev/badge/skills/fledgeling-co/fledgeling-plugins/atlas-publish/github.svg)](https://agentmods.dev/skills/fledgeling-co/fledgeling-plugins/atlas-publish)
Your own site
<a href="https://agentmods.dev/skills/fledgeling-co/fledgeling-plugins/atlas-publish"><img src="https://agentmods.dev/badge/skills/fledgeling-co/fledgeling-plugins/atlas-publish/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for atlas-publish

Your own site · 80×15
<a href="https://agentmods.dev/skills/fledgeling-co/fledgeling-plugins/atlas-publish"><img src="https://agentmods.dev/badge/skills/fledgeling-co/fledgeling-plugins/atlas-publish.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 281 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,710 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00281 $0.04710
Opus 5 $0.00140 $0.02355
Sonnet 5 $0.00056 $0.00942
Haiku 4.5 $0.00028 $0.00471

Measured 4d ago against content hash 0dc82eed1a05, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

atlas-publish scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

| Blob upload | `curl -sSI <returned blob url>` | not `200`, or `content-length` differs from the local file's byte count |
plugins/atlas-publish/skills/atlas-publish/SKILL.md · 234 lines

How it starts

The opening of the file, as written. The whole thing — 234 lines — stays where its author put it; the contents beside it link to each section on GitHub.

atlas-publish — Atlas release conductor

You take the currently-open PRs in the Atlas monorepo and drive them to a registered draft release — either an over-the-air (OTA) JavaScript bundle or an App Store binary. The heavy work is real: you merge branches, archive a binary, upload it to TestFlight, export a JS bundle, put bytes in a public Blob store, and write release rows to production Mongo. The one thing you do not do is make any of it reach an end user.

You run in the founder's Claude Code on their Mac, against production infrastructure.

Running as a Gemini model? Read gemini.md in this directory first, then follow this file with the overrides it names. It turns the zero-publish rule, the Step 0 gate states, the per-asset upload denominator and the review-per-PR count into ledgers with read-back commands, and names which of Steps 3 and 5 to hand to another model. Other models skip it.

Why draft is where automation stops

Not because the step is hard, and not because you might get it wrong. A draft OTA bundle and a TestFlight build are re-buildable artifacts — a bad one is deleted, re-exported and registered again inside one export cycle. A published bundle is not: it lands on phones you do not control, and retracting it changes what the next boot serves rather than undoing the one that already happened. Tolerance tracks how reproducible the target is, not how good the checking is, so no amount of extra checking moves a customer-facing publish inside the envelope.

Concretely, this skill calls register_bundle and create_app_version, each with confirm: true, and each only ever writes status: draft. It does not call publish_bundle, publish_app_version, retract_bundle, retract_app_version or set_min_app_version. When you reach the end of a run, hand the founder the three publish routes (references/handoff.md) and stop.

The boundary is restated at Step 9 and Step 11, where the temptation actually sits — a rule stated once in frontmatter and needed nine steps later is a rule the run has already forgotten. Measured reason: instruction-following degrades 39% on average from single-turn to multi-turn across 15 models, which is why the gates below are exit codes rather than paragraphs.

Read the full file on GitHub · 234 lines

Files

What ships with it

7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago Changed · +1 tokens per session 0dc82eed1a05
  2. 12d ago First seen · 234 lines · 280 tokens per session scan A 04874dd9a3a3

Subscribe to this mod's changes

atlas-publish is a skill published in the GitHub repository fledgeling-co/fledgeling-plugins (2 stars, last pushed 3d ago), licensed MIT. It adds 281 tokens to every session and 4,710 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.