What is deploy-package?

A deployment procedure for cz-agents-mcp packages, which are separately built services in a shared code repository. It builds a selected package locally, sends its source to Hetzner, and replaces the running container.

Use it to deploy supported packages such as ares, cnb, sanctions, isir, adis, dd, or realestate, run their tests and builds, rebuild Docker images, and check the service health endpoint.

It standardizes package checks, remote updates, Docker rebuilding, service replacement, and health verification in one workflow.

How martinhavel/cz-agents-mcp configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to martinhavel/cz-agents-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/martinhavel/cz-agents-mcp/main/.claude/skills/deploy-package/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/martinhavel/cz-agents-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/martinhavel/cz-agents-mcp/deploy-package/github.svg)](https://agentmods.dev/skills/martinhavel/cz-agents-mcp/deploy-package)

Your own site

<a href="https://agentmods.dev/skills/martinhavel/cz-agents-mcp/deploy-package"><img src="https://agentmods.dev/badge/skills/martinhavel/cz-agents-mcp/deploy-package/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/martinhavel/cz-agents-mcp/deploy-package"><img src="https://agentmods.dev/badge/skills/martinhavel/cz-agents-mcp/deploy-package.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 476 The whole file, excluding the scripts and references it only reads on demand.

Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00000	$0.00476
Opus 5	$0.00000	$0.00238
Sonnet 5	$0.00000	$0.00095
Haiku 4.5	$0.00000	$0.00048

Measured 10d ago against content hash 37ab73df51cb, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade C, and why

deploy-package scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reaches for credential fileshighPrivilege escalation

SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.

3. **Rsync src/** — sync `packages/<pkg>/src/` and `packages/<pkg>/package.json` to `/opt/docker/compose/cz-agents-mcp/packages/<pkg>/` on Hetzner (`[email protected]`, key `~/.ssh/id_rsa_macbook`)

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

6. **Health check** — `docker exec cz-agents-<pkg> wget -qO- http://localhost:<port>/health` and show result

.claude/skills/deploy-package/SKILL.md · 35 lines

What it actually says

deploy-package

Deploy a cz-agents-mcp package to Hetzner production.

Steps

Validate — check the package name is one of: ares, cnb, sanctions, isir, adis, dd, realestate, shared
Local build + test — run npm test --workspace=@czagents/<pkg> then npm run build --workspace=@czagents/<pkg>
Rsync src/ — sync packages/<pkg>/src/ and packages/<pkg>/package.json to /opt/docker/compose/cz-agents-mcp/packages/<pkg>/ on Hetzner ([email protected], key ~/.ssh/id_rsa_macbook)
Docker rebuild — docker compose build --no-cache <pkg> in /opt/docker/compose/cz-agents-mcp/
Hot-swap — docker compose up -d <pkg> (zero-downtime replace)
Health check — docker exec cz-agents-<pkg> wget -qO- http://localhost:<port>/health and show result

Port map

package	port
ares	3030
cnb	3031
sanctions	3032
dd	3033
isir	3034
adis	3035
realestate	3036

Notes

If shared is changed, rebuild ALL packages that depend on it (run full monorepo build)
Never restart reality-webapp or cz-agents-webapp — those are separate compose projects
If health check fails, immediately roll back: docker compose up -d <pkg> with previous image tag

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

10d ago First seen · 35 lines · 0 tokens per session scan C 37ab73df51cb

Subscribe to this mod's changes

deploy-package is a skill published in the GitHub repository martinhavel/cz-agents-mcp (6 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 476 tokens. A static security scan graded it C with 2 findings (reaches for credential files, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Cloud Containers DevOps and cloud ares claude czech-republic due-diligence insolvency kyc

api-workers

Cloudflare Workers deployment using createWorkerHandler from @cyanheads/mcp-ts-core/worker. Covers the full handler signature, binding types, CloudflareBindings extensibility, runtime compatibility guards, and wrangler.toml requirements.

cyanheads/sanctions-screening-mcp-server · 51 tokens

azd-deployment

Deploy containerized frontend + backend applications to Azure Container Apps with remote builds, managed identity, and idempotent infrastructure.

sickn33/agentic-awesome-skills · 29 tokens

openshell-cli

Guide agents through using the OpenShell CLI (openshell) for sandbox management, gateway registration, provider configuration and refresh, policy iteration, settings, service exposure, BYOC workflows, and inference routing. Covers basic through advanced multi-step workflows. Trigger keywords - openshell, sandbox…

NVIDIA/OpenShell · 127 tokens

langbot-deploy

Deploy and configure a LangBot instance — Docker / Docker Compose, Kubernetes, the config.yaml model, the Box sandbox runtime, the plugin runtime, and the global API key. Use when installing, deploying, upgrading, or configuring LangBot in production or self-hosted environments. Triggers on "deploy langbot", "langbot…

langbot-app/LangBot · 104 tokens

compute-env-setup

Set up a compute environment on a remote provider so Claude Science jobs can run there. Covers direct SSH/conda hosts, Slurm clusters, container-via-bridge runners, and managed-API providers (Modal, GCP, RunPod). Use when standing up a new provider, porting an env to a different backend, adding a tool that needs its…

UnicomAI/wanwu · 134 tokens

atmos-helmfile

Helmfile orchestration: sync/apply/destroy/diff, Kubernetes deployments, varfile generation, EKS integration, source management.

cloudposse/atmos · 33 tokens

cz-agents-mcp: Skill for Claude Code