globus-mcp: Skill for Claude Code

.agents/skills/globus-release/SKILL.md

globus-release is a skill for Claude Code from PurdueRCAC/globus-mcp. It costs 203 tokens per session (4,105 once invoked), scanned A, original, MIT.

A human-approved release step for increasing a project's version and publishing a Git tag and GitHub release. A Git tag is a named, fixed point in the project's history that users can install.

In plain words
What is it for?
Use it to create final releases or alpha, beta, and release-candidate versions, check the package, and publish the selected tag.
Why use it?
It separates permanent version publishing from normal branch merging and rehearses the release before pushing it publicly.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: names the AskUserQuestion tool; installed under .agents/ (shared by several agents); mentions AGENTS.md.

This is PurdueRCAC/globus-mcp's own configuration. It tells Claude Code how to work on globus-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything globus-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to PurdueRCAC/globus-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/PurdueRCAC/globus-mcp/main/.agents/skills/globus-release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/PurdueRCAC/globus-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for globus-release

README.md
[![agentmods](https://agentmods.dev/badge/skills/purduercac/globus-mcp/globus-release/github.svg)](https://agentmods.dev/skills/purduercac/globus-mcp/globus-release)
Your own site
<a href="https://agentmods.dev/skills/purduercac/globus-mcp/globus-release"><img src="https://agentmods.dev/badge/skills/purduercac/globus-mcp/globus-release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for globus-release

Your own site · 80×15
<a href="https://agentmods.dev/skills/purduercac/globus-mcp/globus-release"><img src="https://agentmods.dev/badge/skills/purduercac/globus-mcp/globus-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 203 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,105 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00203 $0.04105
Opus 5 $0.00102 $0.02053
Sonnet 5 $0.00041 $0.00821
Haiku 4.5 $0.00020 $0.00411

Measured 8d ago against content hash 39885a2250bc, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

globus-release scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

`curl https://pypi.org/pypi/globus-mcp/json` verification — and the "a version string can never be
.agents/skills/globus-release/SKILL.md · 239 lines

How it starts

The opening of the file, as written. The whole thing — 239 lines — stays where its author put it; the contents beside it link to each section on GitHub.

globus-release — cut a version (release / pre-release), human-gated

When to Use

Invoke /globus-release to bump the version and cut a release — the concern /globus-publish explicitly leaves out. It is an operational sibling of /globus-harness, NOT a lifecycle step: it touches no spec/, no FSM, no GOAL/PLAN/TECH/REVIEW; it moves the version and the tag and publishes a GitHub release. This is where irreversible, permanent outward publishes happen — a pushed tag is what uvx --from git+…@vX.Y.Z resolves for every user from that moment on — so it always confirms before the first push and rehearses everything in an isolated git worktree first.

This project is not published to PyPI. Users install straight from git (uvx --from git+https://github.com/PurdueRCAC/globus-mcp …), so the tag is the release artifact. The full packaging gate still runs (uv build, twine check --strict, sdist hygiene) — partly because a broken sdist breaks the uvx install path too, and partly so the day someone does publish to PyPI, the metadata has already been passing for releases.

Reference: factory/invariants.md §8 (version single-sourced; the supported Python range), the "Packaging & release" section of AGENTS.md.

Harness portability. Runs on any harness — see factory/portability.md. Fallbacks: run the Current state commands yourself if not auto-injected; ask in plain text and STOP if AskUserQuestion is unavailable. git / gh / uv are portable shell, and the worktree dry-run is plain git worktree — no Claude-specific affordance is load-bearing here.

User Instructions

Additional instructions provided with the invocation: $ARGUMENTS

Current state (injected at load)

  • Branch: !git branch --show-current
  • Tree (must be clean): !git status --porcelain | head -n 20
  • Version (pyproject.toml — the only source): !head -n 5 pyproject.toml
  • Recent tags: !git tag -l --sort=-v:refname | head -n 8
  • main tip: !git log --oneline -1 main 2>/dev/null
  • Signing key: !git config user.signingkey || echo "(none configured)"

Read the full file on GitHub · 239 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 239 lines · 203 tokens per session scan A 39885a2250bc

Subscribe to this mod's changes

globus-release is a skill published in the GitHub repository PurdueRCAC/globus-mcp (1 stars, last pushed 13d ago), licensed MIT. It adds 203 tokens to every session and 4,105 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.