Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/paultyng/testagent/publish-releasenpx skills add paultyng/testagent --skill publish-releasegit clone --depth 1 https://github.com/paultyng/testagentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/paultyng/testagent/publish-release)<a href="https://agentmods.dev/skills/paultyng/testagent/publish-release"><img src="https://agentmods.dev/badge/skills/paultyng/testagent/publish-release.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.01753 |
| Opus 5 | $0.00025 | $0.00877 |
| Sonnet 5 | $0.00010 | $0.00351 |
| Haiku 4.5 | $0.00005 | $0.00175 |
Grade A, and why
publish-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 213 lines — stays where its author put it; the contents beside it link to each section on GitHub.
publish-release
Execute the release process documented in RELEASING.md. RELEASING.md is the policy source-of-record: semver scope, the bump table keyed to testagent's public surface, two runbooks, recovery branches. This skill is the executor: it cites RELEASING.md sections by anchor, performs each step, and gates on the one combined decision a human must own (version number + release-notes copy).
1. Preflight
git checkout main
git pull --ff-only
git status --porcelain # must be empty
task ci # full local build + lint + test
gh auth status # GH_TOKEN scope: repo
Identify the previous tag:
PREV=$(git describe --tags --abbrev=0)
If any preflight step fails, stop and report. Do not proceed — release should always cut from a clean, green main.
2. Surface diff + bump analysis
Run the surface-touching diff from RELEASING.md § Pre-tag checklist:
git log $PREV..HEAD --oneline
git diff $PREV..HEAD -- main.go cmd/ internal/slash/slash.go \
internal/hooks/hooks.go cmd/claude/print.go
Group commit subjects by Conventional Commits type (feat:,
fix:, refactor:, chore:, docs:, ci:, test:,
BREAKING CHANGE:). For each surface-touching change, map to the
bump table at RELEASING.md § Semver policy.
- Any
BREAKING CHANGE:footer or!in the subject → major (but see the v0.x clamp below). - New flag / slash command / hook event / public surface → minor.
- Pure bug fix / internal refactor / docs / test → patch.
v0.x clamp: until v1.0.0, the project's convention is to clamp
everything to patch unless the user explicitly overrides. New
features still go in, just packaged as v0.Y.Z+1 not v0.Y+1.0.
This trades semver-strictness for release cadence and is documented
in RELEASING.md.
Output: proposed bump (patch / minor / major) with file-and-
line evidence per category.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 213 lines · 50 tokens per session scan A 12995bdaa213
publish-release is a skill published in the GitHub repository paultyng/testagent (7 stars, last pushed 1mo ago), licensed MIT. It adds 50 tokens to every session and 1,753 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
release
Release pipeline for CLI, mobile, web, and server. Guides through version bumping, building, testing, publishing, and deploying. Replaces the old interactive release-it flow with a Claude Code-native experience. Use when user types /release or asks to release, publish, deploy, or ship any component.
cut-release
Use this skill to cut an APM release from the current worktree: assess whether the cycle since the last tag warrants a patch or minor bump (semver discipline against the merged-since-last-tag diff), sanitize the [Unreleased] CHANGELOG block into a dated version block with one concise "so what" entry per merged PR…
deploy
Use when shipping a release of Agent Sessions — bumping version, updating CHANGELOG, building, signing, notarizing, publishing appcast, and creating a GitHub release.
release-notes
Use when writing or curating the user-facing release copy for an Agent Sessions release — README "What's New", GitHub release notes, Sparkle release notes, or website/launch copy. Not for the internal CHANGELOG, which stays a full development history.
codexu-release
Run this skill from the repository root. Treat the release as a real public publish: verify the current remote state first, keep unrelated user changes out of release commits, and report exactly what was built, pushed, and released.
git-workflow
Git 工作流专家。规范化版本控制，确保提交历史清晰可追溯。支持 Conventional Commits 规范、Pull Request 最佳实践、分支管理策略和自动化工作流。.