ship

ship is a skill for Claude Code from griffinwork40/agent-framework. It costs 93 tokens per session (3,122 once invoked), scanned A, a copy of ship, Apache-2.0.

A release workflow for finished local code. It checks the work, runs the tests, creates a commit, pushes the branch, and opens a pull request for review.

In plain words
What is it for?
Use it when changes are ready to review, such as when you want to ship, push, and open a pull request. It can also prepare the steps without pushing anything.
Why use it?
It removes the repetitive hand-off steps between finishing code locally and sending it to teammates. It also records what was checked in the pull request.

Skill for Claude Code

Written for Claude Code: when-to-use in frontmatter. Also seen: mentions subagents.

Part of the agent-workflow-amplifiers plugin — 24 skills, 2 commands, 2 agents shipped together

Good fit Use it when changes are ready to review, such as when you want to ship, push, and open a pull request. It can also prepare the steps without pushing anything.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/griffinwork40/agent-framework/ship
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add griffinwork40/agent-framework --skill ship
Clone the repo
git clone --depth 1 https://github.com/griffinwork40/agent-framework

Made for: Claude Code.

Or install agent-workflow-amplifiers, the plugin that ships this one along with the rest of its 24 skills, 2 commands, 2 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ship

README.md
[![agentmods](https://agentmods.dev/badge/skills/griffinwork40/agent-framework/ship/github.svg)](https://agentmods.dev/skills/griffinwork40/agent-framework/ship)
Your own site
<a href="https://agentmods.dev/skills/griffinwork40/agent-framework/ship"><img src="https://agentmods.dev/badge/skills/griffinwork40/agent-framework/ship/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ship

Your own site · 80×15
<a href="https://agentmods.dev/skills/griffinwork40/agent-framework/ship"><img src="https://agentmods.dev/badge/skills/griffinwork40/agent-framework/ship.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 93 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,122 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 95% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00093 $0.03122
Opus 5.5 $0.00037 $0.01249
Sonnet 5.5 $0.00019 $0.00624
Haiku 4.5 $0.00009 $0.00312

Measured 19d ago against content hash 65cd01d2ebc3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

95% identical to ship — 34 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/ship/SKILL.md · 169 lines

How it starts

The opening of the file, as written. The whole thing — 169 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Sub-agent contract

/contract

Release pipeline for work that is already done locally. This skill does NOT build, implement, or fix — if the task needs code, route to /mint; if a bug needs diagnosis, route to /diagnose. This skill's job is the hand-off from "done locally" to "visible in a PR."

Skip when:

  • Working tree is clean (nothing to ship — tell the user).
  • Current branch is the default branch (main/master) — ask the user for a feature branch.
  • User invokes with --dry-run → produce the plan but take no git actions.

Arguments:

  • --verify — force the optional adversarial verifier wave (Phase 6), regardless of diff size.
  • --draft — open the PR as a draft.
  • --dry-run — run phases 1–5 but stop before Phase 7 (no push, no PR).

Hard rules (non-negotiable — these override any inferred convention):

  • Branch lock. Whatever branch is checked out when /ship starts is the only branch you may commit and push from. NEVER git checkout to a different branch during this skill — not to main, not to master, not to a sibling feature branch. If pre-flight finds you on the default branch, abort. Do not "recover" by switching branches yourself.
  • Never push to the default branch. Phase 5 pushes the CURRENT (feature) branch. Phase 8 opens a PR. There is no path through this skill that pushes to main/master or merges without a PR. If you find yourself about to run git push origin main (or equivalent), stop.
  • User intent is absolute. If the user said "make a PR," "open a PR," "submit for review," or anything synonymous, you MUST complete Phase 8. "Ship" / "release" alone also implies PR — there is no interpretation under which /ship means "skip the PR step."
  • Do not invent project convention. Never assert "this project uses direct-to-main flow," "this repo merges direct," or any equivalent justification for bypassing the PR step. If you genuinely cannot tell whether the project uses PRs, run gh pr list --state merged --limit 5; ≥3 merged PRs in the last week ⇒ PR is the convention. If still ambiguous, ask the user. Default to PR — it is the safer choice.
  • Anchor cwd. When /ship is invoked, pwd at that moment is the only working directory you operate in. All git commands and file reads must run inside that directory — never cd to a sibling worktree, the parent repo, or any other path during this skill. If you find yourself reading state from a path other than the invocation cwd (e.g. git log returning unrelated commits, or a file diff that doesn't match what was just edited), stop and re-anchor on the original cwd. Worktrees and sibling repos look almost identical; cwd is the only disambiguator.

Phase 1 — Pre-flight (mandatory, runs BEFORE any git mutation). Invoke ground-state via the Skill tool. Abort and surface the blocker with remediation steps if ground-state reports any of:

  • Uncommitted changes in files unrelated to the declared scope
  • Branch behind origin/<default> (stale — user needs to rebase/merge first)
  • Current branch IS the default branch
  • Wrong-repo context (user's cwd doesn't match the branch's purpose)

Phase 2 — Test gate. Detect the project's test harness by scanning, in order:

  1. package.json → scripts.test (run via the project's package manager: pnpm/yarn/npm)
  2. pyproject.toml → pytest if configured, or scripts.test
  3. Cargo.toml → cargo test
  4. go.mod → go test ./...
  5. Makefile → test target

If found → run it. Non-zero exit → abort; surface the failing output and recommend /diagnose. Do not proceed to commit.

If no harness detected → warn the user: "No test harness detected. Ship without running tests?" Require explicit yes. Do not silently skip.

Phase 3 — Draft commit message. Read the cumulative diff: git diff --stat origin/<default>...HEAD + full git diff. Synthesize a commit message:

  • Subject (≤70 chars): imperative, Conventional Commits format (feat, fix, chore, refactor, docs, etc.)
  • Body: 2–5 bullets on WHY — the motivation, constraint, or trade-off. Skip the WHAT — the diff speaks for itself.

Read the full file on GitHub · 169 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 19d ago Changed · +22 lines 65cd01d2ebc3
  2. 1mo ago First seen · 147 lines · 93 tokens per session scan A 4b082cdcbfe5

Subscribe to this mod's changes

ship is a skill published in the GitHub repository griffinwork40/agent-framework (23 stars, last pushed 16d ago), licensed Apache-2.0. It adds 93 tokens to every session and 3,122 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 95% identical to ship, differing in 34 lines, and is treated as a copy.