release-tag

release-tag is a skill for Claude Code from Prismer-AI/PrismerCloud. It costs 46 tokens per session (4,310 once invoked), scanned A, original, MIT.

A release-tagging workflow that checks required tests and approval before creating and pushing a version tag. A version tag is a named Git pointer used to identify a release.

In plain words
What is it for?
Use it to tag and push a verified test release after the required checks and approval have passed.
Why use it?
It prevents untested code, drifting commits, or self-approved changes from being published. Production version tags are refused by this workflow.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Good fit Use it to tag and push a verified test release after the required checks and approval have passed.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/prismer-ai/prismercloud/release-tag
About the project

Prismer Cloud is an infrastructure layer for AI agents that provides shared learning, compressed context, persistent memory, collaboration, messaging, tasks, identity, and workspaces. It is for agents and the people building or using long-running agent systems that need information and outcomes to persist across sessions. The catalogue entries provide skills, hooks, agents, instructions, and a plugin for using Prismer Cloud.

Prismer-AI/PrismerCloud · 1,386 stars · on GitHub · prismer.cloud

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Prismer-AI/PrismerCloud --skill release-tag
Clone the repo
git clone --depth 1 https://github.com/Prismer-AI/PrismerCloud

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for release-tag

README.md
[![agentmods](https://agentmods.dev/badge/skills/prismer-ai/prismercloud/release-tag/github.svg)](https://agentmods.dev/skills/prismer-ai/prismercloud/release-tag)
Your own site
<a href="https://agentmods.dev/skills/prismer-ai/prismercloud/release-tag"><img src="https://agentmods.dev/badge/skills/prismer-ai/prismercloud/release-tag/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for release-tag

Your own site · 80×15
<a href="https://agentmods.dev/skills/prismer-ai/prismercloud/release-tag"><img src="https://agentmods.dev/badge/skills/prismer-ai/prismercloud/release-tag.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 46 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,310 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00046 $0.04310
Opus 5.5 $0.00018 $0.01724
Sonnet 5.5 $0.00009 $0.00862
Haiku 4.5 $0.00005 $0.00431

Measured 17d ago against content hash 86d3ff8b4c2c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

release-tag scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

sdk/apc/skills/release-tag/SKILL.md · 195 lines

How it starts

The opening of the file, as written. The whole thing — 195 lines — stays where its author put it; the contents beside it link to each section on GitHub.

release-tag

发版打 tag(apc/01 §2 release-tag,收口步 6)。它把测试→上线的焊点焊死:没有 tier 全绿 / baseline 无新红的结构化证据,审批请求根本不创建、tag 绝不 push。tier 门跑真 run.ts 读真退出码;tag 名按 <channel>-<target>-YYYYMMDD-vX.Y.Z 算;审批通过后 git tag && push 到本地 bare mirror 替身(真 GitLab push + pipeline 轮询 = M5)。

什么时候用:release-preflight 绿 + release-db-config-sync 无阻塞之后,要把一个 test 版本推上 CI。

承重纪律(发版 skill 的命根子,先记死)

  • prod 前缀 tag 必拒(不变量 2 · 两人闸)。四个映射 APP_ENV=prod 的前缀——k8s-prod-* / desktop-prod-* / prod-* / ali-k8s-prod-*——先于一切 git / tier 动作硬拒,本 verb 不做任何 git 动作。别试 prod:真 prod 红线由 GitLab protected tags(P-1,运维配置)落地,本 skill 只护到"不替你打 prod tag"。要发 prod = 人走 M5 路径。
  • --tier 必须显式传,没有默认值。TD(桌面冒烟)在 apps/desktop/e2e/smoke/ 无 spec 时会自动 skipped-with-note(passed:0/failed:0),单独拿它当发版门是一道不可能红的空门——之前 SKILL 范例全不带 --tier 让 agent 照抄默认值正是这么踩的坑(apc/12 §0.12)。选一个会真执行断言的层,例如 --tier=T0,T1;prod 前缀路径(下方触发)例外——它先于 tier 门拒绝,不需要 --tier。
  • tier 绿是 push 的硬前置,"绿"必须是真跑过用例。tier 红 / env_blocked / 空跑(该轮所有 tier 的 passed+failed 合计为 0,即一个用例都没真执行)⇒ blocked,审批请求不创建、tag 不 push。不许放松 tier、挑能绿的层、或拿一个恰好全 skip 的层骗过门。
  • 审批门不可跳。tier 绿但未审批 = staged(dry-run:出 tag + tier 证据,不 push)。批准路径必须同时传 --task <taskId> --approved <approvalId>;CLI 从 cloud 读回批件和 task,校验 approved / release_tag / task 绑定 / 非自批,且两者 metadata 的 commit SHA 必须一致。随机 token 不再能放行。
  • tag 打获批 commit,不打 HEAD。并行工作使 HEAD 漂移也不得把未审内容带入 tag;获批 SHA 不在 repo 则 fail-closed。

Anti-pattern(直接判红)

  • ❌ 给 --target prod 或手拼 prod 前缀 tag 想让 skill 打 prod。命中即 blocked,别绕。
  • ❌ tier blocked 时先打 tag 再补测试。焊点就是不让这发生。
  • ❌ 拿到 staged 就以为发版完成。staged 是"等审批",tag 还没 push。
  • ❌ 用 git tag + 裸 git push origin 手工绕过本 verb,跳过 tier 门和审批门。

工具契约(签名以此为准)

apc 不在 PATH——在仓库根用 npx tsx sdk/apc/bin/apc.ts <sub>。

命令 作用 退出码
npx tsx sdk/apc/bin/apc.ts release tag [--channel k8s|desktop] [--target test|prod] [--version X.Y.Z] --tier=<tiers> [--task <taskId> --approved <approvalId>] [--json] prod 人闸 → tier 门 → cloud 批件/task/commit 他证 → 把获批 SHA push 到本地 bare mirror 0 green(pushed)· 3 staged(tier 绿待审批)· 1 blocked(tier 红 / 他证失败 / prod 拒 / push 失败)· 2 用法错

Read the full file on GitHub · 195 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 17d ago First seen · 195 lines · 46 tokens per session scan A 86d3ff8b4c2c

Subscribe to this mod's changes

release-tag is a skill published in the GitHub repository Prismer-AI/PrismerCloud (1,386 stars, last pushed 2d ago), licensed MIT. It adds 46 tokens to every session and 4,310 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-29.