agentmods.dev

dhpk-deploy-list

dhpk-deploy-list is a skill for Claude Code, Codex from hmj1026/dhpk. It costs 151 tokens per session (2,953 once invoked), scanned A, original, MIT.

A command-line tool that builds a list of files to include in a software deployment from Git history. A deployment is the process of shipping a change to a running environment.

In plain words
What is it for?
Use it to create deploy or release checklists across projects, using selected commits, source-code markers, or a range of Git changes.
Why use it?
It turns commit or source-code information into a release checklist and separates selected deployment files from other changes such as tests or documentation.

Skill for Claude CodeCodex

Written for Claude Code and Codex: shipped in a Claude Code plugin, but also agents/openai.yaml present.

Part of the dhpk plugin — 39 skills, 1 command, 1 agent, 3 hooks shipped together

not rated 2repo changed 8d ago A scan 151 tokens original MIT

Good fit Use it to create deploy or release checklists across projects, using selected commits, source-code markers, or a range of Git changes.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/hmj1026/dhpk/dhpk-deploy-list
View source ↗ hmj1026/dhpk
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add hmj1026/dhpk --skill dhpk-deploy-list
Clone the repo
git clone --depth 1 https://github.com/hmj1026/dhpk

Made for: Claude Code, Codex.

Or install dhpk, the plugin that ships this one along with the rest of its 39 skills, 1 command, 1 agent, 3 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for dhpk-deploy-list

README.md
[![agentmods](https://agentmods.dev/badge/skills/hmj1026/dhpk/dhpk-deploy-list/github.svg)](https://agentmods.dev/skills/hmj1026/dhpk/dhpk-deploy-list)
Your own site
<a href="https://agentmods.dev/skills/hmj1026/dhpk/dhpk-deploy-list"><img src="https://agentmods.dev/badge/skills/hmj1026/dhpk/dhpk-deploy-list/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for dhpk-deploy-list

Your own site · 80×15
<a href="https://agentmods.dev/skills/hmj1026/dhpk/dhpk-deploy-list"><img src="https://agentmods.dev/badge/skills/hmj1026/dhpk/dhpk-deploy-list.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 151 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,953 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00151 $0.02953
Opus 5.5 $0.00060 $0.01181
Sonnet 5.5 $0.00030 $0.00591
Haiku 4.5 $0.00015 $0.00295

Measured 8d ago against content hash da7dbeb50074, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

dhpk-deploy-list scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

The scan reads SKILL.md. This mod also ships 16 executable files (evals/generic/fixtures/fixture-01-php-yii.sh, evals/generic/fixtures/fixture-02-laravel.sh, evals/generic/fixtures/fixture-03-node.sh, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

generated/claude-marketplace/package/skills/release-creator/references/dhpk-deploy-list/SKILL.md · 235 lines

How it starts

The opening of the file, as written. The whole thing — 235 lines — stays where its author put it; the contents beside it link to each section on GitHub.

deploy-list

Generates a deploy file list from git history. All logic lives in the script — Claude parses arguments, invokes the script, and emits stdout verbatim. No post-processing.

Package surfaces

The package keeps the immutable generator in scripts/deploy-list.sh, its golden runner in scripts/check-golden.sh, ecosystem rules in presets/, structural labels in i18n/, and preset guidance in references/. Copy config.sh.example to a project-local config.sh when defaults need to be pinned. The evals/ fixtures are the regression surface for schema changes.

Arguments

Flag Required Default Notes
--tag ✅ — ^\[.+\]$, pure metadata, NOT used for grouping
--description ✅ — freeform text
--deploy-commits ⛳ (none) CSV of commit SHAs → union diff = main group; rest of base..head = warn group
--anchor ⛳ (none) source-code inline anchor string → rg -l --fixed-strings finds matching source files; mutually exclusive with --deploy-commits / --auto-detect-tag
--date ⛳ today YYYY/MM/DD
--author ⛳ $DEFAULT_AUTHOR → $USER → user
--project ⛳ git toplevel basename
--base ⛳ $DEFAULT_BASE → main git ref (ignored in anchor mode)
--head ⛳ HEAD git ref (ignored in anchor mode)
--preset ⛳ $DEFAULT_PRESET → auto-detect → generic see Preset selection
--lang ⛳ $DEFAULT_LANG → en zh-TW or en
--auto-detect-tag ⛳ off grep -i -F $TAG in commit messages, fill --deploy-commits if empty

Defaults marked $DEFAULT_* are read from config.sh if present. CLI flags always win.

Preset selection

Resolution order (first non-empty wins):

  1. --preset <name> CLI flag
  2. $DEFAULT_PRESET from config.sh
  3. Auto-detect (probe order, first match wins):
    1. protected/yii.php or protected/config/main.php + protected/views/ → php-yii
    2. artisan at root → laravel
    3. package.json + no composer.json → node
    4. pyproject.toml or setup.py → python
    5. fallback → generic (stderr note emitted)

Read the full file on GitHub · 235 lines

Files

What ships with it

28 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago Changed · +1 lines da7dbeb50074
  2. 1mo ago First seen · 234 lines · 151 tokens per session scan A d042c7b5c67f

Subscribe to this mod's changes

dhpk-deploy-list is a skill published in the GitHub repository hmj1026/dhpk (2 stars, last pushed yesterday), licensed MIT. It adds 151 tokens to every session and 2,953 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.

Claude CodeGit and workflowOpenSpecReleasesai-toolingclaude-code-pluginharness
Related

Other skills, from other repositories

release

Release a new version of the mumei repository. Invoke when the user gives an explicit release instruction ("release it", "/release", "patch release", "ship 0.2.0"). Takes no argument or "patch" / "minor" / "major" for a SemVer bump, or a direct version such as "0.2.0". Wraps any uncommitted changes into a single…

iroha924/mumei · 144 tokens

release

Cut a brooks-lint release: set the version in package.json, propagate it across all four plugin manifests and every version-bearing text file (README badges, docs site metadata), write the CHANGELOG entry, validate, then commit, push, tag, and publish the GitHub release. Triggers when the maintainer asks to "release"…

hyhmrright/brooks-lint · 135 tokens

push-ci

Push to remote and monitor CI. Validates branch safety, executes git push WITH explicit user approval, then monitors CI run status via gh CLI. Use when: user says 'push', 'push and watch CI', 'ship it', 'push-ci'. Not for: committing (use /smart-commit), creating PRs (use /create-pr), merging (use /merge-prep).

sd0xdev/sd0x-harness · 82 tokens

evolve-lite:publish

Publish a private entity (guideline, feedback, project or reference) to a configured write-scope repo.

AgentToolkit/altk-evolve · 28 tokens

bump-version

A procedure for changing a package and plugin version in several project files at the same time.

sd0xdev/sd0x-harness · 61 tokens

release

Bump a plugin's version, write a detailed changelog entry for the upgrade skill to consume, and commit+push. Takes a plugin slug argument identifying which plugin under plugins/ to release. Use this skill whenever the user says "release", "version bump", "cut a release", "changelog and push", or finishes a set of…

gtapps/claude-code-hermit · 104 tokens