subwave-app-android-release

subwave-app-android-release is a skill for Claude Code from perminder-klair/subwave. It costs 0 tokens per session (3,562 once invoked), scanned C, original, MIT.

An Android release workflow for the SUB/WAVE mobile app, which is built with Expo. It creates either a Google Play App Bundle or an APK that testers can install directly.

In plain words
What is it for?
Use it to build a new SUB/WAVE Android version in the cloud, prepare it for manual upload to Google Play, or give testers an install link and QR code. It is for distributed builds, not running the app over USB on your own phone.
Why use it?
It organizes the different ways to ship an Android update, so a store release is not confused with a quick test build. It also explains when an over-the-air JavaScript update may avoid a new binary.

Skill for Claude Code

Written for Claude Code: installed under .claude/.

About the project

Subwave is an internet radio station where an AI DJ selects music and speaks between tracks for every listener at once. Listeners can request music in plain language, while operators manage the queue, schedule, DJ personas, and station activity. Its catalogue entries define skills and workflows for operating the station.

perminder-klair/subwave · 1,301 stars · on GitHub · getsubwave.com

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/perminder-klair/subwave/subwave-app-android-release
Any agent
npx skills add perminder-klair/subwave --skill subwave-app-android-release
Clone the repo
git clone --depth 1 https://github.com/perminder-klair/subwave

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for subwave-app-android-release

README.md
[![agentmods](https://agentmods.dev/badge/skills/perminder-klair/subwave/subwave-app-android-release.svg)](https://agentmods.dev/skills/perminder-klair/subwave/subwave-app-android-release)
Your own site
<a href="https://agentmods.dev/skills/perminder-klair/subwave/subwave-app-android-release"><img src="https://agentmods.dev/badge/skills/perminder-klair/subwave/subwave-app-android-release.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,562 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.03562
Opus 5 $0.00000 $0.01781
Sonnet 5 $0.00000 $0.00712
Haiku 4.5 $0.00000 $0.00356

Measured 6d ago against content hash 3616c053aa79, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade C, and why

subwave-app-android-release scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

`$TMPDIR/eas-build-local-nodejs`; `rm -rf` it before retrying.
.claude/skills/subwave-app-android-release/SKILL.md · 262 lines

How it starts

The opening of the file, as written. The whole thing — 262 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SUB/WAVE Android release → Play Store / testers

The app is live in production on the Google Play Store. There are two ways to ship a fresh Android binary, and which you want depends on the audience:

  • Play Store release (production profile) — builds a signed .aab App Bundle on EAS. You then upload it to the Play Console by hand (submission is manual — see the Play Store section). This is how real users get the update.
  • Quick sideload test (preview profile) — builds an APK and returns an install link + QR any Android phone can tap, no Google account involved. Good for handing a build to a trusted tester fast, outside the Play Store machinery.

Either way EAS generates+stores the signing keystore for you. Ask which one the user wants if it's ambiguous — "release"/"ship to the store" → production .aab; "send to a tester"/"install link" → preview APK.

For a phone you can physically plug in (USB/adb, live hot-reload), use the local subwave-app-android skill instead.

First: does this even need a new build? (OTA)

The app ships expo-updates (OTA). If the change is JS/TS only — components, hooks, styles, copy, logic, Metro-bundled assets — you do not need a new APK/AAB. Push it over-the-air to the binaries already installed:

cd "$APP"
eas update --channel preview --message "fix: …"      # tester (internal-APK) builds
eas update --channel production --message "fix: …"    # Play builds

It reaches every installed build whose runtime version (fingerprint) matches. Testers see it on the next cold start (it fetches in the background; fallbackToCacheTimeout: 0 keeps launch instant, so kill + relaunch twice to confirm it applied).

A new build is only required when native inputs changed: a dependency add/upgrade, anything under app/patches/, a config plugin, or app.json's android/plugins sections. The fingerprint policy guarantees an OTA can't land on a binary with mismatched native code. Rule of thumb: ran npx expo install or touched patches/? → build. Otherwise → OTA. Full decision table: app/docs/RELEASE.md.

Read the full file on GitHub · 262 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 262 lines · 0 tokens per session scan C 3616c053aa79

Subscribe to this mod's changes

subwave-app-android-release is a skill published in the GitHub repository perminder-klair/subwave (1,301 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 3,562 tokens. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

flutter-cherry-pick

How to land a formal cherry-pick of a merged PR for the flutter/flutter repo stable or beta channel. Only use for flutter/flutter landed pull requests. Only use when the cherry pick request is into "stable", "beta" or a branch that has the format with flutter- . -candidate.0.

flutter/flutter · 72 tokens

engine-whats-new

Generates the "what's new" release summary and diff file for changes in the Flutter engine (//engine/src/flutter) between two releases (e.g., 3.47 vs 3.44). When to use: - Only activate when explicitly asked by the user to generate what's new in the engine, diff Flutter engine releases, or produce an engine release…

flutter/flutter · 115 tokens

find-release

A skill to find the lowest Dart and Flutter release containing a given commit. Use this skill whenever users ask about when a commit landed in Flutter or Dart releases, inquire about release versions for specific SHAs, or want to know if a commit is included in stable, beta, or dev channels for Flutter/Dart projects.

flutter/flutter · 67 tokens

shorebird-patch

Shorebird OTA パッチの作成・staging 配布(stable 昇格はユーザー実施).

K9i-0/ccpocket · 30 tokens

release-new-version

Use when preparing a Zafiro release commit that requires syncing app/build.gradle.kts version fields with the latest GitHub release.

niki914/zafiro · 30 tokens

app-release

End-to-end pipeline for releasing an iOS / watchOS app to TestFlight and the App Store. Use when the user wants to publish, ship, or release an iOS/watchOS app, get a build onto TestFlight, archive and upload via xcodebuild, deploy a CloudKit schema to Production, set App Privacy or export compliance, mint a…

glebis/claude-skills · 166 tokens