arch-release-check

arch-release-check is a skill for Codex from Koredotcom/agents-mcp-tools. It costs 82 tokens per session (1,035 once invoked), scanned A, original, MIT.

A pre-release checklist for Kore.ai Agent Platform projects. It checks the exported project, package, evaluation results, model usage, response time, context, and secrets before publishing or deploying.

In plain words
What is it for?
Use it to lint and validate a package, compare an evaluation set with the last release, check model calls and latency, inspect a test conversation, and record pass or fail evidence.
Why use it?
It helps find release problems before customers or a demo encounter them. It also compares the planned release with the previous one instead of relying only on inspection.

Skill for Codex

Written for Codex: agents/openai.yaml present.

Good fit Use it to lint and validate a package, compare an evaluation set with the last release, check model calls and latency, inspect a test conversation, and record pass or fail evidence.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/koredotcom/agents-mcp-tools/arch-release-check
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Koredotcom/agents-mcp-tools --skill arch-release-check
Clone the repo
git clone --depth 1 https://github.com/Koredotcom/agents-mcp-tools

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for arch-release-check

README.md
[![agentmods](https://agentmods.dev/badge/skills/koredotcom/agents-mcp-tools/arch-release-check/github.svg)](https://agentmods.dev/skills/koredotcom/agents-mcp-tools/arch-release-check)
Your own site
<a href="https://agentmods.dev/skills/koredotcom/agents-mcp-tools/arch-release-check"><img src="https://agentmods.dev/badge/skills/koredotcom/agents-mcp-tools/arch-release-check/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for arch-release-check

Your own site · 80×15
<a href="https://agentmods.dev/skills/koredotcom/agents-mcp-tools/arch-release-check"><img src="https://agentmods.dev/badge/skills/koredotcom/agents-mcp-tools/arch-release-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 82 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,035 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00082 $0.01035
Opus 5.5 $0.00033 $0.00414
Sonnet 5.5 $0.00016 $0.00207
Haiku 4.5 $0.00008 $0.00103

Measured 1mo ago against content hash f77eda49937b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

arch-release-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/arch-release-check/SKILL.md · 66 lines

How it starts

The opening of the file, as written. The whole thing — 66 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Release check

Steps

  1. Export and lint. Export the project with platform_import_export, save the files to the project folder, then run debug_lint_abl and platform_validate_package on the package. Every finding goes in the report; none are merged.
  2. Eval compare. Run the eval set against the release target with platform_eval_runs (target set to the dev, staging or production environment, a deployment, or the agent version you will ship) and compare it with the last release's run.
  3. Budget check. For the top intents, confirm model calls per turn and latency are within the experience contract, using sessions from the eval run.
  4. Context check. Read the full model requests of a 20-turn test conversation, from "Export entire trace" on the session page (see arch-context-budget), for growth, truncation markers and secrets.
  5. Checklist. Walk the list below and mark each item pass, fail or not applicable with evidence.

Pre-ship checklist

  • Lint and package validation are clean.
  • Eval set ran on the release target and was compared with the last release; success held.
  • Model calls per turn and latency are within the experience contract for the top intents.
  • Every defect fixed since the last release has a scenario in the eval set.
  • Each agent declares BEHAVIOR: role:, or you have checked its ## Current Context in a trace; no {{context}} and no unfilled {{placeholder}} in a test trace.
  • No config.* or env.* in GOAL, PERSONA, LIMITATIONS, SYSTEM_PROMPT or RESPOND; credentials are in auth profiles; a trace search for secret values finds nothing.
  • Handoff CONTEXT: keys are lowercase and history uses a supported form; delegates get everything through INPUT or PURPOSE.
  • Every tool with a large or nested result has MODEL_CONTEXT, tested against real, empty and error responses; rich responses carry a response MODEL_CONTEXT.
  • Sensitive GATHER fields are marked SENSITIVE: true with a SENSITIVE_DISPLAY mode (and a PII_TYPE so the project's rules for that type apply).
  • Every tool declares effect; irreversible writes confirm and freeze key values; each tool the caller depends on has an authored on_error message (see arch-tool-design).
  • Workflow tools set mode and timeout_ms explicitly, and the workflow version the release needs is activated (see arch-workflow-design).
  • Knowledge-base documents are indexed and max_search_tokens is set on every knowledge-base tool (see arch-knowledge-search).
  • INTENTS are declared with descriptions.
  • After an import: knowledge bases are populated, and model bindings, auth profiles and config variables are set.
  • Final tests ran in a new conversation on the version that will be deployed.
  • Voice: ASR and latency sets re-run if the provider, timeouts, profile or gather fields changed; runtime voice settings (fillers, VAD) re-checked after deploy; a fast-tier model is available.
  • Speech-to-speech: the effective orchestration mode verified in traces; every tool exit path (success, error, timeout, empty) tested; the welcome is protected from barge-in.

Read the full file on GitHub · 66 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 66 lines · 82 tokens per session scan A f77eda49937b

Subscribe to this mod's changes

arch-release-check is a skill published in the GitHub repository Koredotcom/agents-mcp-tools (4 stars, last pushed 1mo ago), licensed MIT. It adds 82 tokens to every session and 1,035 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-09.

Related

arch-release-check compared with skills from other repositories

arch-release-check next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
arch-release-checkKoredotcom/agents-mcp-toolsSkill41mo agoMITA82Codex
chinese-git-workflowjnMetaCode/superpowers-zhSkill8.5kyesterdayMITA69Claude Code
atmos-profilescloudposse/atmosSkill1.4ktodayApache-2.0A35Claude Code
webhook-managementhoangsonww/Claude-Code-Agent-MonitorSkill1.2ktodayMITA56Claude Code, Codex
managing-github-actions-secretsPostHog/posthog-fossSkill731todayMITA67Claude Code, Codex
deployment-engineerrmyndharis/antigravity-skillsSkill2.0k5d agoMITA73Claude Code, Codex
monorepo-managementwshobson/agentsSkill42k4d agoMITC54Claude Code