An agent for releasing an existing npm package that uses Changesets, a tool for recording and applying package version updates.

It creates a changeset, fixes release-blocking checks, pushes changes, watches continuous integration, merges the version-update pull request, monitors publishing, and verifies the package on npm.

It coordinates the many steps between preparing a release and confirming that the new package version is published.

autoship — Skill for Claude Code by mblode/agent-skills

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add mblode/agent-skills --skill autoship

Clone the repo

git clone --depth 1 https://github.com/mblode/agent-skills

Made for: Claude Code.

Or install agent-skills, the plugin that ships this one along with the rest of its 28 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/mblode/agent-skills/autoship/github.svg)](https://agentmods.dev/skills/mblode/agent-skills/autoship)

Your own site

<a href="https://agentmods.dev/skills/mblode/agent-skills/autoship"><img src="https://agentmods.dev/badge/skills/mblode/agent-skills/autoship/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/mblode/agent-skills/autoship"><img src="https://agentmods.dev/badge/skills/mblode/agent-skills/autoship.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 48 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,876 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

Socket pass 4 Oct 2026
Snyk warn 4 Oct 2026
NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium MCP Rug Pull · line 78
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Fix: Pin the version: npx @scope/[email protected]
medium MCP Rug Pull · line 130
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Fix: Pin the version: npx @scope/[email protected]

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00048	$0.02876
Opus 5.5	$0.00019	$0.01150
Sonnet 5.5	$0.00010	$0.00575
Haiku 4.5	$0.00005	$0.00288

Measured today against content hash e13be7bed135, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

autoship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/autoship/SKILL.md · 141 lines

How it starts

The opening of the file, as written. The whole thing — 141 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Autoship

Drive an npm release end to end: changeset, fix loop, push, CI watch, Version Packages PR merge, publish watch, npm verification.

IS: the full release pipeline for an existing changesets-based npm package, from writing the changeset file to confirming the new version on the registry, plus diagnosing why a release run did not version or publish.
IS NOT: opening a feature PR (use pr-creator), monitoring a feature PR for reviews, conflicts, or CI (use pr-babysitter), general build or type fixes outside a release flow, or scaffolding a new package (use scaffold-cli, which hands off to autoship for the first release).

The Release Loop

One workflow, two successive runs. Misreading it as two workflows causes most autoship mistakes.

Push a commit containing a pending .changeset/*.md file to the default branch.
The release workflow runs: changesets/action sees pending changesets, runs changeset version in CI, and opens or updates a PR on branch changeset-release/<default-branch> (title "Version Packages", suffixed "(next)" in pre mode) carrying the package.json bump and CHANGELOG.md entry.
Merge that PR once every check is green.
The same workflow runs again. With no pending changesets left, the action runs its publish script (changeset publish), which publishes to npm and, by default, pushes the git tag and creates a GitHub release.

The local job ends at "push the changeset file". CI owns versioning and publishing.

The action has two live majors with different input names: @v1 takes publish:, @v2 takes publish-script:. Read the uses: line before diagnosing a run that versioned but never published.

Reference Files

File	Read when
`references/changeset-and-commit.md`	Steps 1-3: writing the changeset file, discovering and running gates non-interactively, staging the release commit
`references/ci-polling.md`	Step 4 and Step 5 watches: the Monitor tool, the commit watch script, failure classification, the Changeset Status check
`references/version-pr-and-publish.md`	Once CI is green: workflow shape, finding and merging the Version Packages PR, the publish run, npm verification, publish failure diagnosis
`evals/evals.json`	Only when changing this skill; never loads during a release

Read the full file on GitHub · 141 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

today Changed e13be7bed135
18d ago Changed · -8 lines · -15 tokens per session 15ebf5a1f046
1mo ago Changed · +6 lines · -40 tokens per session 921d8aac855d
1mo ago First seen · 143 lines · 103 tokens per session scan A b83916767b0d

Subscribe to this mod's changes

autoship is a skill published in the GitHub repository mblode/agent-skills (154 stars, last pushed today), licensed MIT. It adds 48 tokens to every session and 2,876 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Claude Code Git and workflow LLM Releases agent-skills ai-agents anthropic developer-tools

publish-site

Versioned site deploys to GitHub/Cloudflare/Netlify Pages.

NousResearch/hermes-agent · 19 tokens

github

GitHub via gh CLI: PRs, issues, reviews, repos, auth.

NousResearch/hermes-agent · 19 tokens

gh-monitor-pr

Start a detached GitHub pull-request monitor that wakes the exact launching Codex Desktop or CLI root through the managed Codex App Server when review, CI, conflict, merge-queue, closure, readiness, or merge events need attention. Use when the user asks Codex to watch, monitor, babysit, or wait on a PR or merge queue…

closedloop-ai/claude-plugins · 81 tokens

autoship