nextclaw: Skill for Claude Code

.agents/skills/nextclaw-desktop-release/SKILL.md

nextclaw-desktop-release is a skill for Claude Code, Codex from Peiiii/nextclaw. It costs 25 tokens per session (748 once invoked), scanned A, original, MIT.

A release guide for building, publishing, recovering, and smoke-testing the NextClaw Desktop application, which is a desktop version of NextClaw.

In plain words
What is it for?
Use it for desktop packaging, stable or beta releases, GitHub assets, update channels, Pages or APT publishing, failed-release recovery, and unsigned macOS or Windows handoffs.
Why use it?
It keeps build outputs, update signatures, release channels, installers, CI, and real runtime checks aligned so a release is not considered finished too early.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is Peiiii/nextclaw's own configuration. It tells Claude Code and Codex how to work on nextclaw itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything nextclaw configures →

Reuse

Borrowing it

Nothing to install: this file belongs to Peiiii/nextclaw. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Peiiii/nextclaw/master/.agents/skills/nextclaw-desktop-release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/Peiiii/nextclaw

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for nextclaw-desktop-release

README.md
[![agentmods](https://agentmods.dev/badge/skills/peiiii/nextclaw/nextclaw-desktop-release/github.svg)](https://agentmods.dev/skills/peiiii/nextclaw/nextclaw-desktop-release)
Your own site
<a href="https://agentmods.dev/skills/peiiii/nextclaw/nextclaw-desktop-release"><img src="https://agentmods.dev/badge/skills/peiiii/nextclaw/nextclaw-desktop-release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for nextclaw-desktop-release

Your own site · 80×15
<a href="https://agentmods.dev/skills/peiiii/nextclaw/nextclaw-desktop-release"><img src="https://agentmods.dev/badge/skills/peiiii/nextclaw/nextclaw-desktop-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 25 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 748 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00025 $0.00748
Opus 5 $0.00013 $0.00374
Sonnet 5 $0.00005 $0.00150
Haiku 4.5 $0.00003 $0.00075

Measured 10d ago against content hash 3682525ba457, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

nextclaw-desktop-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/nextclaw-desktop-release/SKILL.md · 42 lines

What it actually says

NextClaw Desktop Release

入口

按当前场景只读取一项:

  • 打包、public key、launcher floor、产物形状:打包合同
  • 发布、GitHub assets、update channel、Pages/APT:发布自动化
  • Electron runtime、GUI/API、Windows installer、真实 profile 冒烟:运行冒烟
  • 已有 tag/run、部分发布、网络/Pages/CI 失败:发布恢复
  • 无签名 macOS/Windows 交付:Unsigned handoff

不要一次读取全部 reference;失败分类改变后再切换分支。

永久合同

  • 发布 channel 必须显式确认;不得因“发布”、失败恢复、Draft 或版本后缀自行选择 beta。仅用户明确要求 beta/preview,或任务已在 beta 链路,才可运行 release:desktop:beta
  • v<runtime>-desktop.<n> 是 stable 构建序号,非 beta/prerelease;-desktop-beta.<n> 才是 beta。stable Release 必须 isPrerelease=false;Draft/recovery 沿用既有 channel 与 release identity。
  • 原始 electron-builder 输出不是可发布产物;安装包必须包含更新验签 public key,并能验证目标 manifest。
  • 以 Electron 内置 Node 为发布运行时事实,不能用开发机 ambient Node 代替。
  • minimumLauncherVersion 来自 apps/desktop/desktop-launcher-compatibility.json,只有真实 launcher 合同破坏才提高。
  • tag/release 只是触发;workflow、assets、channel、release notes URL、适用 Pages/APT 全闭合才完成。
  • 隔离 worktree 发布仍须安全回流本地目标分支,不覆盖活跃 WIP。
  • Desktop 不授权 NPM publish;stable 只消费已验证的 nextclaw stable identity。存在未发布 runtime 语义时停止,转入常规 stable/全平台发布。
  • /发布NextClaw桌面版 成功报告 DESKTOP_READY;全平台只在 NEXTCLAW_STABLE_READY 后进入本 owner,desktop 失败不得重发 NPM/runtime。
  • /发布NextClaw全平台版 由 GitHub release.yml target=all 调用;AI/Delivery 仅触发、监控父 workflow。Standalone Desktop 仅用于窄发布/恢复。
  • DESKTOP_READYALL_PLATFORMS_READY 只关闭子目标;active contract 下向 lifecycle 返回 stable ID 的 acceptance_updatesparent_status,版本/tag/artifact 不能完成 parent-goal。

默认入口

  • 本地包合同:PATH=/opt/homebrew/bin:$PATH pnpm desktop:package:verify
  • 人工可点击交付:PATH=/opt/homebrew/bin:$PATH pnpm desktop:package:handoff:verify
  • Beta:pnpm release:desktop:beta
  • Stable:pnpm release:desktop:stable

最终报告精确 artifact、launcher/runtime 版本、workflow/release URL、public manifest 状态和未闭合项。

Files

What ships with it

5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 42 lines · 25 tokens per session scan A 3682525ba457

Subscribe to this mod's changes

nextclaw-desktop-release is a skill published in the GitHub repository Peiiii/nextclaw (256 stars, last pushed today), licensed MIT. It adds 25 tokens to every session and 748 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

graincrawl

Maintain, verify, and release graincrawl, the local-first Granola archive CLI, including SQLite archive behavior, read-only Granola source boundaries, Homebrew tap packaging, and crawlkit-powered TUI/snapshot surfaces.

vincentkoc/dotskills · 47 tokens

crawlkit

Maintain and release the crawlkit Go library, preserving downstream compatibility for gitcrawl, slacrawl, discrawl, and notcrawl.

vincentkoc/dotskills · 30 tokens

openclaw-github-dedupe

Investigate a cluster of GitHub issues and PRs, determine canonical candidates, post duplicate/related status, preserve contributor credit, and execute cleanup actions. Supports autonomous mode for provided-link-only closeout, merge/fix follow-through, changelog, and post-merge issue/PR cleanup.

vincentkoc/dotskills · 68 tokens

org-branch-cleanup

Audit and safely prune stale branches across a GitHub organization with immutable snapshots, conservative merged-PR classification, live SHA/protection/open-PR revalidation, resumable deletion ledgers, and post-delete verification. Use when a maintainer asks to clean up old, dead, merged, bot-created, or abandoned…

vincentkoc/dotskills · 91 tokens

github-airplane-mode

Inspect or switch the local Git and GitHub download guard using an already-installed compatible low-data command. Use for airplane mode, flight or metered connections, returning online, or requests to enable, disable, or automatically select low-data protection on this machine.

vincentkoc/dotskills · 56 tokens

openclaw-pr-batch-sweep

Select, review, repair, validate, and land batches of up to 20 low-risk OpenClaw contributor pull requests using Vincent's maintainer preferences and bounded sub-agent lanes. Use for "next 20", broad contributor PR sweeps, merge-candidate mining, or continued PR-batch work where drafts, maintainer work, trivial…

vincentkoc/dotskills · 95 tokens