deploy-receipt

deploy-receipt is a skill for Claude Code, Codex from naimkatiman/continuous-improvement. It costs 113 tokens per session (3,271 once invoked), scanned A, original, MIT.

A deployment-verification skill that checks whether the commit merged into the deployment branch is actually running in production and whether a health-check URL responds successfully.

In plain words
What is it for?
Use it after merging code into an automatically deployed branch to verify the running commit and application health before reporting the work as complete.
Why use it?
A successful merge does not always mean the new code was deployed; the deployment may use an old commit, fail to build, or roll back.

Skill for Claude CodeCodex

Installs and runs on its own, but its text points at files inside its plugin — anything it tells you to read at a ${CLAUDE_PLUGIN_ROOT} path is only there once the plugin is installed. Installing the plugin gets both.

Part of the continuous-improvement plugin — 28 skills, 6 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/naimkatiman/continuous-improvement/deploy-receipt
Any agent
npx skills add naimkatiman/continuous-improvement --skill deploy-receipt
Clone the repo
git clone --depth 1 https://github.com/naimkatiman/continuous-improvement

Made for: Claude Code, Codex.

Or install continuous-improvement, the plugin that ships this one along with the rest of its 28 skills, 6 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for deploy-receipt

README.md
[![agentmods](https://agentmods.dev/badge/skills/naimkatiman/continuous-improvement/deploy-receipt.svg)](https://agentmods.dev/skills/naimkatiman/continuous-improvement/deploy-receipt)
Your own site
<a href="https://agentmods.dev/skills/naimkatiman/continuous-improvement/deploy-receipt"><img src="https://agentmods.dev/badge/skills/naimkatiman/continuous-improvement/deploy-receipt.svg" alt="Measured on agentmods" height="20"></a>
Per session 113 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,271 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00113 $0.03271
Opus 5 $0.00056 $0.01636
Sonnet 5 $0.00023 $0.00654
Haiku 4.5 $0.00011 $0.00327

Measured 5d ago against content hash 3cbbf778955d, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

deploy-receipt scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

### Route C — Version endpoint curl (works for any HTTP service)
plugins/continuous-improvement/skills/deploy-receipt/SKILL.md · 175 lines

How it starts

The opening of the file, as written. The whole thing — 175 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Deploy Receipt — Closing the Merge-to-Production Gap

Why This Skill Exists

Multiple sessions in the operator's recent telemetry ended in a "partially achieved" state with the same shape: PR merged green, branch deleted, agent reports done — and then hours later the operator discovers the deploy provider never picked up the commit, was building from a stale lockfile, or silently rolled back. The merge happened. The deploy did not.

finishing-a-development-branch (vendored from Obra superpowers in third-party/superpowers/) ends at the merge. For repos that do not auto-deploy that is the correct boundary. For repos that DO auto-deploy from main (Railway, Cloudflare Workers, Vercel, Netlify, Fly.io, Cloud Run, App Runner, et al.) the merge is only the trigger — the work is not done until the deployed SHA matches the merged HEAD and the application answers a healthcheck.

This skill defines the receipt that closes that gap, without modifying the vendored upstream file.

When to Activate

Activate when ALL of the following are true:

  1. A merge into the deploy branch (typically main or master) has just landed
  2. bash "${CLAUDE_PLUGIN_ROOT}/scripts/detect-deploy-target.sh" (source: scripts/detect-deploy-target.sh) returns a value other than none at the repo root. The script encodes the full file-marker table — railway.toml / railway.jsonrailway, wrangler.toml / wrangler.jsonccloudflare, vercel.json / .vercel/vercel, netlify.tomlnetlify, fly.tomlfly, app.yamlappengine, apprunner.yamlapprunner, .github/workflows/*.yml with a deploy: job → gha-deploy. First match wins, in that order. The script is the source of truth; the file list above is documentation
  3. finishing-a-development-branch has reported "merged" — not "PR opened", not "review pending"

Do NOT activate when:

  • Repo is library-only / package-published (npm, PyPI, crates.io) — those have a different verification surface
  • Deploy is manual (operator runs wrangler deploy themselves) — the merge is genuinely the boundary
  • Merge target is a non-deploy branch (develop, staging-only, experimental)

Read the full file on GitHub · 175 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 175 lines · 113 tokens per session scan A 3cbbf778955d

Subscribe to this mod's changes

deploy-receipt is a skill published in the GitHub repository naimkatiman/continuous-improvement (7 stars, last pushed 10d ago), licensed MIT. It adds 113 tokens to every session and 3,271 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

deploying-infra

Validate infrastructure changes and, after explicit confirmation, apply Terraform, Helm, Kustomize, or Kubernetes deployments. Use when the user says "deploy", "deploy to staging", "terraform apply", "helm upgrade", "kubectl apply", "rollout", "deploy check", "validate deployment", or "validate infrastructure".…

alexei-led/cc-thingz · 107 tokens

vllm-gemma-4-31b

Operating-point reference for serving Gemma 4 31B on vLLM — TP sizing, maxmodellen, maxnumseqs, gpumemoryutilization, kvcachedtype, EAGLE3 spec-dec, chattemplate choice.

air-gapped/skills · 60 tokens

k8s-components-checker

Survey an RKE2 community cluster against an embedded compatibility registry of 19 stack components and produce a verdict for upgrade-readiness, drift-review, and version-skew questions. Components: RKE2, Rancher, Harvester, Cilium, Tetragon, cert-manager, Kyverno, KEDA, Argo CD, Harbor, Traefik, Rook, Ceph, OpenEBS…

air-gapped/skills · 204 tokens

prometheus-mimir-grafana

Query Prometheus and Grafana Mimir, write and debug PromQL, and build or fix Grafana dashboards — for agents solving problems from metrics. Covers the Prometheus HTTP API (/api/v1/query, queryrange, series, labels, metadata), Mimir multi-tenancy (X-Scope-OrgID, federation a|b|c, per-tenant 422/429 limits), the PromQL…

air-gapped/skills · 204 tokens

ansible-idrac-9-10

Run and debug dellemc.openmanage Ansible playbooks against Dell PowerEdge iDRAC 9 (14G–16G) and iDRAC 10 (17G — R670, R770, R870, R970, XE9780, XE9785). Covers the iDRAC 10 / iDRAC 9 ≥ 7.30.10.50 BasicAuthState: Unadvertised default that silently 401s ansible.builtin.uri (Dell KB 000437501), the idracsession +…

air-gapped/skills · 354 tokens

harvester-upgrade

Plan and run a controlled, COMMUNITY-edition Harvester HCI upgrade off an EOL line up to latest stable — the no-skip minor ladder (1.5→1.6→1.7→1.8; embedded RKE2/KubeVirt/Longhorn/SLE-Micro ride along), gated at each hop on first upgrading the EXTERNAL Rancher + a matching Harvester UI-extension (1.6↔Rancher 2.12…

air-gapped/skills · 255 tokens