release-process

release-process is a skill for Claude Code, Codex from microsoft/Generative-AI-for-beginners-dotnet. It costs 16 tokens per session (2,606 once invoked), scanned C, a copy of release-process, MIT.

A release checklist for publishing two npm packages, which are reusable JavaScript or TypeScript packages shared through npm. It covers checks before publishing, the correct publish commands, fallback steps when automated workflows fail, and checks after publishing.

In plain words
What is it for?
Use it to validate a release, publish the project’s npm packages, handle failed CI workflows, and confirm that a published release is available and correct.
Why use it?
Publishing a package with missing or broken changes can delay users and require lengthy recovery work. This documents the project’s required release path and the responsibilities involved.

Skill for Claude CodeCodex ✓ vendor

Written for no agent in particular: nothing here depends on one.

Good fit Use it to validate a release, publish the project’s npm packages, handle failed CI workflows, and confirm that a published release is available and correct.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/microsoft/generative-ai-for-beginners-dotnet/release-process
About the project

Generative AI for Beginners .NET is a hands-on course that teaches .NET developers to build applications using generative AI models and related tools. Its lessons use practical samples covering scenarios such as chat, audio transcription, agents, and local AI. The catalogue entries are add-ons associated with the course repository.

microsoft/Generative-AI-for-beginners-dotnet · 3,145 stars · on GitHub · aka.ms

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add microsoft/Generative-AI-for-beginners-dotnet --skill release-process
Clone the repo
git clone --depth 1 https://github.com/microsoft/Generative-AI-for-beginners-dotnet

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for release-process

README.md
[![agentmods](https://agentmods.dev/badge/skills/microsoft/generative-ai-for-beginners-dotnet/release-process/github.svg)](https://agentmods.dev/skills/microsoft/generative-ai-for-beginners-dotnet/release-process)
Your own site
<a href="https://agentmods.dev/skills/microsoft/generative-ai-for-beginners-dotnet/release-process"><img src="https://agentmods.dev/badge/skills/microsoft/generative-ai-for-beginners-dotnet/release-process/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for release-process

Your own site · 80×15
<a href="https://agentmods.dev/skills/microsoft/generative-ai-for-beginners-dotnet/release-process"><img src="https://agentmods.dev/badge/skills/microsoft/generative-ai-for-beginners-dotnet/release-process.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 16 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,606 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00016 $0.02606
Opus 5.5 $0.00006 $0.01042
Sonnet 5.5 $0.00003 $0.00521
Haiku 4.5 $0.00002 $0.00261

Measured 1mo ago against content hash 38134fe27547, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

release-process scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf node_modules packages/*/node_modules
Origin

This is a copy

100% identical to release-process — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.squad/templates/skills/release-process/SKILL.md · 218 lines

How it starts

The opening of the file, as written. The whole thing — 218 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Release Process

Earned knowledge from the v0.9.0→v0.9.1 and v0.9.4 incidents. Every agent involved in releases MUST read this before starting release work. See also: .github/skills/release-process/SKILL.md for the Copilot-facing runbook.

SCOPE

✅ THIS SKILL PRODUCES:

  • Pre-release validation checks that prevent broken publishes
  • Correct npm publish commands (never workspace-scoped)
  • Fallback procedures when CI workflows fail
  • Post-publish verification steps

❌ THIS SKILL DOES NOT PRODUCE:

  • Feature implementation or test code
  • Architecture decisions
  • Documentation content

Confidence: high

Established through the v0.9.1 incident (8-hour recovery) and reinforced by the v0.9.4 release delay (PRs #1042, #1043, #1044). Every rule below is battle-tested.

Context

Squad publishes two npm packages: @bradygaster/squad-sdk and @bradygaster/squad-cli. The release pipeline flows: dev → preview → main → GitHub Release → npm publish. Brady (project owner) triggers releases — the coordinator does NOT.

Rules (Non-Negotiable)

1. Coordinator Does NOT Publish

The coordinator routes work and manages agents. It does NOT run npm publish, trigger release workflows, or make release decisions. Brady owns the release trigger. If an agent or the coordinator is asked to publish, escalate to Brady.

2. Pre-Publish Dependency Validation

Before ANY release is tagged, scan every packages/*/package.json for:

  • file: references (workspace leak — the v0.9.0 root cause)
  • link: references
  • Absolute paths in dependency values
  • Non-semver version strings

Command:

grep -r '"file:\|"link:\|"/' packages/*/package.json

If anything matches, STOP. Do not proceed. Fix the reference first.

3. Never Use npm -w for Publishing

npm -w packages/squad-sdk publish hangs silently when 2FA is enabled. Always cd into the package directory:

cd packages/squad-sdk && npm publish --access public
cd packages/squad-cli && npm publish --access public

Read the full file on GitHub · 218 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 218 lines · 16 tokens per session scan C 38134fe27547

Subscribe to this mod's changes

release-process is a skill published in the GitHub repository microsoft/Generative-AI-for-beginners-dotnet (3,145 stars, last pushed today), licensed MIT. It adds 16 tokens to every session and 2,606 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). It is 100% identical to release-process, differing in 0 lines, and is treated as a copy.