deploy-release

deploy-release is a skill for Codex from HoangNguyen0403/agent-skills-standard. It costs 17 tokens per session (603 once invoked), scanned A, original, MIT.

A deployment workflow for preparing and checking a staged or production release, including smoke checks and a rollback plan.

In plain words
What is it for?
Use it to confirm approvals and configuration, deploy to staging, run basic health checks, promote the release, and monitor logs, metrics, errors, and latency.
Why use it?
It reduces the risk of shipping an unready change and provides a defined way to recover when deployment checks or user flows fail.

Skill for Codex

Written for Codex: installed under .codex/.

Good fit Use it to confirm approvals and configuration, deploy to staging, run basic health checks, promote the release, and monitor logs, metrics, errors, and latency.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/hoangnguyen0403/agent-skills-standard/deploy-release
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add HoangNguyen0403/agent-skills-standard --skill deploy-release
Clone the repo
git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for deploy-release

README.md
[![agentmods](https://agentmods.dev/badge/skills/hoangnguyen0403/agent-skills-standard/deploy-release/github.svg)](https://agentmods.dev/skills/hoangnguyen0403/agent-skills-standard/deploy-release)
Your own site
<a href="https://agentmods.dev/skills/hoangnguyen0403/agent-skills-standard/deploy-release"><img src="https://agentmods.dev/badge/skills/hoangnguyen0403/agent-skills-standard/deploy-release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for deploy-release

Your own site · 80×15
<a href="https://agentmods.dev/skills/hoangnguyen0403/agent-skills-standard/deploy-release"><img src="https://agentmods.dev/badge/skills/hoangnguyen0403/agent-skills-standard/deploy-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 17 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 603 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00017 $0.00603
Opus 5 $0.00009 $0.00302
Sonnet 5 $0.00003 $0.00121
Haiku 4.5 $0.00002 $0.00060

Measured 9d ago against content hash 4b113c18eaee, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

deploy-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.codex/skills/deploy-release/SKILL.md · 91 lines

How it starts

The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Deploy Release Skill

[!IMPORTANT] Prepare and verify a staged or production deployment with rollback and smoke checks.

Optional args: slug=, ticket=<id/url>, mode=interactive|autonomous|channel, channel=, auto_continue=true|false, profile=business|hybrid|technical.

Instructions

When the user asks to perform this workflow, execute the following steps:

Deploy Release Workflow

Goal: Ship verified work with explicit deployment steps, smoke checks, and rollback criteria.

Steps

  1. Confirm readiness:
    • Verification report is PASS or accepted with documented risk.
    • Required approvals are present.
    • Migrations and feature flags are accounted for.
  2. Prepare release:
    • Identify version, environment, deploy command, and owner.
    • Confirm secrets, config, queues, cron, and external services.
    • Define rollback command or revert path.
  3. Deploy:
    • Run staging deploy first when available.
    • Run smoke checks before promotion.
    • Promote only when smoke checks pass.
  4. Monitor:
    • Check logs, metrics, errors, latency, and core user flows.
    • Stop or roll back on defined failure signals.
  5. Route:
    • User-facing notes -> publish-notes.
    • Process and standards feedback -> retro-learn.

Runtime Contract

  • Use once verification/UAT signoff is PASS and a release window is open.
  • Required inputs: verification report plus release version, environment, and rollback path.
  • Return BLOCKED only when required approvals, migrations, or rollback path are unresolved.

Handoff Payload

  • slug, release verdict (GO/NO-GO/ROLLED-BACK), smoke check results, rollback path, outcome report, next workflow.

Blocking Questions

  • Ask max 3 at a time with a recommended default and 2-3 options.

Output Template

# Deployment Report: [Name]

## Release Verdict
GO | NO-GO | ROLLED-BACK

## Release

## Environments

## Commands

## Smoke Checks

| Check | Result | Evidence |
| --- | --- | --- |
| [check] | [PASS/FAIL/BLOCKED] | [evidence] |

## Rollback

## Outcome Report
feature_status: implemented | blocked
requirement_trace: BRD-OBJ-* -> REQ-* -> AC-* -> SRS-* -> evidence
completed_evidence: []; missing_evidence: []; decision_needed: []; recommended_next_workflow: publish-notes | retro-learn

## Next Workflow

publish-notes | retro-learn

## Cost Report
Call `get_session_cost(workflow="deploy-release")` before final handoff.

Read the full file on GitHub · 91 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 91 lines · 17 tokens per session scan A 4b113c18eaee

Subscribe to this mod's changes

deploy-release is a skill published in the GitHub repository HoangNguyen0403/agent-skills-standard (565 stars, last pushed 3d ago), licensed MIT. It adds 17 tokens to every session and 603 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

adapter-aws-lambda

Deploy tRPC on AWS Lambda with awsLambdaRequestHandler() from @trpc/server/adapters/aws-lambda for API Gateway v1 (REST, APIGatewayProxyEvent) and v2 (HTTP, APIGatewayProxyEventV2), and Lambda Function URLs. Enable response streaming with awsLambdaStreamingRequestHandler() wrapped in awslambda.streamifyResponse().…

trpc/trpc · 93 tokens

adapter-fetch

Deploy tRPC on WinterCG-compliant edge runtimes with fetchRequestHandler() from @trpc/server/adapters/fetch. Supports Cloudflare Workers, Deno Deploy, Vercel Edge Runtime, Astro, Remix, SolidStart. FetchCreateContextFnOptions provides req (Request) and resHeaders (Headers) for context creation. The endpoint option…

trpc/trpc · 86 tokens

Cursor rules for Next

Cursor rules for Next.js development with Vercel and TypeScript integration.

AmariahAK/atlarix-skills · 4 tokens

oma-tf-infra

Infrastructure-as-code specialist for multi-cloud provisioning using Terraform across any provider (AWS, GCP, Azure, Oracle Cloud). Use for terraform plan/apply, state management, compute, databases, storage, networking, IAM, OIDC, cost optimization, policy-as-code, ISO/IEC 42001 AI controls, ISO 22301 continuity, and…

first-fluke/fullstack-starter · 87 tokens

React Performance

Skill "React Performance" from databayt/hogwarts, covering react performance skill, memoization, code splitting and checklist.

databayt/hogwarts · 5 tokens

elite-engineer

The operating system for elite software engineering in TypeScript, React, and Next.js. Enforces the cognitive models, architecture laws, type-level patterns, component design, visual standards, and performance mandates that separate exceptional software from the ordinary — grounded in named sources (Torvalds…

Kerim-Sabic/elite-engineer · 167 tokens