Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/griffinwork40/agent-afk/shipnpx skills add griffinwork40/agent-afk --skill shipgit clone --depth 1 https://github.com/griffinwork40/agent-afkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/griffinwork40/agent-afk/ship)<a href="https://agentmods.dev/skills/griffinwork40/agent-afk/ship"><img src="https://agentmods.dev/badge/skills/griffinwork40/agent-afk/ship.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00093 | $0.02819 |
| Opus 5 | $0.00046 | $0.01409 |
| Sonnet 5 | $0.00019 | $0.00564 |
| Haiku 4.5 | $0.00009 | $0.00282 |
Grade A, and why
ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- ship — 95% identical, 1 lines differ
How it starts
The opening of the file, as written. The whole thing — 148 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sub-agent contract
/contract
Release pipeline for work that is already done locally. This skill does NOT build, implement, or fix — if the task needs code, route to /mint; if a bug needs diagnosis, route to /diagnose. This skill's job is the hand-off from "done locally" to "visible in a PR."
Skip when:
- Working tree is clean (nothing to ship — tell the user).
- Current branch is the default branch (
main/master) — ask the user for a feature branch. - User invokes with
--dry-run→ produce the plan but take no git actions.
Arguments:
--verify— force the optional adversarial verifier wave (Phase 6), regardless of diff size.--draft— open the PR as a draft.--dry-run— run phases 1–5 but stop before Phase 7 (no push, no PR).
Hard rules (non-negotiable — these override any inferred convention):
- Branch lock. Whatever branch is checked out when
/shipstarts is the only branch you may commit and push from. NEVERgit checkoutto a different branch during this skill — not tomain, not tomaster, not to a sibling feature branch. If pre-flight finds you on the default branch, abort. Do not "recover" by switching branches yourself. - Never push to the default branch. Phase 5 pushes the CURRENT (feature) branch. Phase 8 opens a PR. There is no path through this skill that pushes to
main/masteror merges without a PR. If you find yourself about to rungit push origin main(or equivalent), stop. - User intent is absolute. If the user said "make a PR," "open a PR," "submit for review," or anything synonymous, you MUST complete Phase 8. "Ship" / "release" alone also implies PR — there is no interpretation under which
/shipmeans "skip the PR step." - Do not invent project convention. Never assert "this project uses direct-to-main flow," "this repo merges direct," or any equivalent justification for bypassing the PR step. If you genuinely cannot tell whether the project uses PRs, run
gh pr list --state merged --limit 5; ≥3 merged PRs in the last week ⇒ PR is the convention. If still ambiguous, ask the user. Default to PR — it is the safer choice. - Anchor cwd. When
/shipis invoked,pwdat that moment is the only working directory you operate in. All git commands and file reads must run inside that directory — nevercdto a sibling worktree, the parent repo, or any other path during this skill. If you find yourself reading state from a path other than the invocation cwd (e.g.git logreturning unrelated commits, or a file diff that doesn't match what was just edited), stop and re-anchor on the original cwd. Worktrees and sibling repos look almost identical; cwd is the only disambiguator.
Phase 1 — Pre-flight (mandatory, runs BEFORE any git mutation).
Invoke ground-state via the Skill tool. Abort and surface the blocker with remediation steps if ground-state reports any of:
- Uncommitted changes in files unrelated to the declared scope
- Branch behind
origin/<default>(stale — user needs to rebase/merge first) - Current branch IS the default branch
- Wrong-repo context (user's cwd doesn't match the branch's purpose)
Phase 2 — Test gate. Detect the project's test harness by scanning, in order:
package.json→scripts.test(run via the project's package manager:pnpm/yarn/npm)pyproject.toml→pytestif configured, orscripts.testCargo.toml→cargo testgo.mod→go test ./...Makefile→testtarget
If found → run it. Non-zero exit → abort; surface the failing output and recommend /diagnose. Do not proceed to commit.
If no harness detected → warn the user: "No test harness detected. Ship without running tests?" Require explicit yes. Do not silently skip.
Phase 3 — Draft commit message.
Read the cumulative diff: git diff --stat origin/<default>...HEAD + full git diff. Synthesize a commit message:
- Subject (≤70 chars): imperative, Conventional Commits format (
feat,fix,chore,refactor,docs, etc.) - Body: 2–5 bullets on WHY — the motivation, constraint, or trade-off. Skip the WHAT — the diff speaks for itself.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 148 lines · 93 tokens per session scan A c74ef9e83e11
ship is a skill published in the GitHub repository griffinwork40/agent-afk (54 stars, last pushed yesterday), licensed Apache-2.0. It adds 93 tokens to every session and 2,819 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
comet-safe-delivery
在保护无关脏改动、关联 worktree、子模块和用户明确边界的前提下,提交、推送、合并或完成范围明确的 Comet 变更。用户要求提交、推送、合并回目标分支、清理 worktree 或交付已准备好的改动时使用。.
cherry-pick
Cherry-pick a commit from main to a Sui release branch, create the release PR, and report the PR URL.
task-snapshot
Create a commit or tag snapshot only when explicitly requested for a milestone, reproducibility checkpoint, handoff, or pinned artifact.
mflux-pr
Make a clean PR in mflux (inspect diff, quick verification, commit, push, open PR) using repo conventions.
changelog
Auto-generates a changelog from git commits, sprint data, and design documents. Produces both internal and player-facing versions.
git-ship
Use this skill whenever the user wants to commit, push, or ship changes in a git repository. Triggers include: "commit changes", "push my changes", "ship it", "commit and push", "create a branch and commit", "make a PR", "open a pull request", "create draft PR", or any variation of committing/pushing work. Always use…