Ghostex is a developer workspace for running and supervising multiple AI coding agents, with separate chats, command-line views, and persistent sessions in a Rust-based desktop shell. Developers use it to switch between agents, review work, preview pages, and continue sessions from mobile devices.
Borrowing it
Nothing to install: this file belongs to maddada/Ghostex. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/maddada/Ghostex/main/.claude/skills/ghostex-release/SKILL.mdgit clone --depth 1 https://github.com/maddada/GhostexWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/maddada/ghostex/ghostex-release)<a href="https://agentmods.dev/skills/maddada/ghostex/ghostex-release"><img src="https://agentmods.dev/badge/skills/maddada/ghostex/ghostex-release/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/maddada/ghostex/ghostex-release"><img src="https://agentmods.dev/badge/skills/maddada/ghostex/ghostex-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.07169 |
| Opus 5.5 | $0.00037 | $0.02868 |
| Sonnet 5.5 | $0.00019 | $0.01434 |
| Haiku 4.5 | $0.00009 | $0.00717 |
Grade A, and why
ghostex-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 467 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Ghostex release
Reconstructed on 2026-10-03 from releases 10.7.0 through 10.9.1 (git history, Actions runs 36878765363, 36885477559 and 37026371059, and the tooling). Items marked (unverified) were inferred and not confirmed from that evidence.
What a release is
- One local commit,
chore: prepare X.Y.Z, changing exactly two files:package.json"version"and a newCHANGELOG.mdsection. Nothing else is bumped by hand: the Cargo crates stay0.1.0, the mobile submodule is untouched, and the appcast is written by CI. bun run release:actions -- X.Y.Zdispatches.github/workflows/release-gpui.ymlonmain. Every build, signing, notarization and publish step runs on GitHub runners (macOS DMG + notarization + Sparkle, Linux deb/rpm/tar, Windows x64/arm64 Velopack, Android APK, Linux ARM64 deb/rpm/tar onubuntu-24.04-arm, gxserver Linux and WSL runtimes).- Each platform has its own publish stage. The first stage to finish creates
tag
vX.Y.Z(at the dispatched commit) and the GitHub release. Its body opens with a download block of at most 3 lines (macOS + Windows, Linux, Android + iOS TestFlight) between<!-- ghostex-downloads:start/end -->markers, then the CHANGELOG section. Later stages amend the release and regenerate that block from the live assets. A failed platform does not hold back the others. - The macOS stage pushes
chore: release X.Y.Z(authorgithub-actions[bot], changesappcast.xmlonly) tomain. Releases do not touch Homebrew: Homebrew's autobump bot (BrewTestBot) opens the official Homebrew/homebrew-cask PRghostex X.Y.Zitself about 30 minutes later, and our own PR is opt-in. Ghostex left the personalmaddada/homebrew-tap(user decision 2026-10-16), so releases no longer push it.
Who runs it, and where
Releases are started by the Main Coordinator from Windows
(C:\dev\Ghostex). Nothing needs a Mac to ship: signing, notarization and
publishing use repository secrets on GitHub's runners, and the dispatch only
needs git, gh (authenticated as maddada), node and bun. Releases up
to 10.9.1 were dispatched from the user's MacBook, so the first Windows
dispatch is new ground: if a dispatcher script breaks on Windows paths, report
the exact error rather than working around it (unverified that it runs cleanly).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed e4b563f6359d
- 5d ago Changed · +68 lines bd25777c9b71
- 7d ago Changed · +1 lines 487bb03fdb86
- 8d ago Changed 81117b5f2e4d
- 10d ago Changed · +4 lines 07da6596e648
- 17d ago Changed · +20 lines 216215b1772e
- 20d ago Changed · +18 lines 2eaad3fb3808
- 21d ago First seen · 356 lines · 93 tokens per session scan A 74739c5e5e01
ghostex-release is a skill published in the GitHub repository maddada/Ghostex (1,420 stars, last pushed today), licensed MIT. It adds 93 tokens to every session and 7,169 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-04.
Other skills, from other repositories
github-release-management
Comprehensive GitHub release orchestration with AI swarm coordination for automated versioning, testing, deployment, and rollback management.
agent-github-modes
Agent skill for github-modes - invoke with $agent-github-modes.
factory-ship
Experimental workflow for publishing and completing configured software delivery work. Use when the user or an enabled factory policy asks to ship.
releasepr
Adopt, configure, run, or troubleshoot compozy/releasepr in a consuming repository, including Actions, beta/stable/legacy plans, notes, dry-runs, and publication. Excludes pr-release internals and general versioning advice.
gitlab-devops
GitLab DevOps operations — issues, merge requests, CI/CD pipelines, repository browsing, labels, milestones, releases, and wiki management. Use when querying GitLab project status, monitoring pipeline executions, browsing repository files, creating issues for network findings, opening merge requests for config…
seed-snapshot-release
An automated workflow for creating and tracking a snapshot release of the pull request on the current branch. A snapshot release is a temporary package build used for testing a branch before a normal release.