Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/repoprompt/repoprompt-ce/rpce-releasenpx skills add repoprompt/repoprompt-ce --skill rpce-releasegit clone --depth 1 https://github.com/repoprompt/repoprompt-ceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/repoprompt/repoprompt-ce/rpce-release)<a href="https://agentmods.dev/skills/repoprompt/repoprompt-ce/rpce-release"><img src="https://agentmods.dev/badge/skills/repoprompt/repoprompt-ce/rpce-release.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00022 | $0.00648 |
| Opus 5 | $0.00011 | $0.00324 |
| Sonnet 5 | $0.00004 | $0.00130 |
| Haiku 4.5 | $0.00002 | $0.00065 |
Grade A, and why
rpce-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.
RepoPrompt CE Release
Use this skill when preparing a RepoPrompt CE release artifact or orienting a maintainer through a production release.
Contributor artifact
Run the secret-free lane:
make dev-release-preflight
make dev-release-artifact
For a local-only release-mode installation signed by the user's own dedicated
self-signed identity, install Python 3 and double-click
Install RepoPrompt CE Local Production.command
in Finder, or use the coordinated CLI path:
CONFIRM_LOCAL_PRODUCTION_INSTALL=1 make dev-install-local-production
This app is not notarized and must not be distributed or uploaded to GitHub Releases.
Report the ZIP, SHA256SUMS, and external artifact manifest written under
dist/. Confirm that the public candidate is universal arm64+x86_64, ad-hoc
signed, intended for packaging validation, and not distributable. Debug and
local self-signed packages remain host-native.
Maintainer publish
Read docs/releasing.md before publishing.
Use the environment-scoped GitHub Publish Release workflow for production
draft creation. It requires an existing pushed tag and the release
environment secrets documented there. Review the resulting ZIP, DMG, checksum, appcast, and artifact-manifest assets
and require the fresh secret-free exact-helper packaged roundtrip to pass, then
use the environment-scoped Promote Release workflow for the same
tag. Promotion verifies and mirrors the existing reviewed assets, publishes
both releases without rebuilding, resumes matching partial states, enforces a
monotonically increasing stable build, and runs anonymous post-publish checks.
Dispatch both workflows from protected main only after the release
environment reviewer gate, main deployment restriction, and immutable v*
tag ruleset are enabled, and GitHub Release immutability is enabled for both
the source and updater repositories. Supply the SHA-256 digest of the reviewed
source-draft SHA256SUMS file when dispatching promotion. Do not paste private keys,
profiles, certificate exports, tokens, or passwords into logs or chat.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 69 lines · 22 tokens per session scan A 7eb6f6db1bb9
rpce-release is a skill published in the GitHub repository repoprompt/repoprompt-ce (900 stars, last pushed today), licensed Apache-2.0. It adds 22 tokens to every session and 648 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
release-openspec
Use this skill when releasing OpenSpec: audit merged work and changeset coverage, decide whether a catch-up changeset PR is needed, prepare or resume the Changesets Version Packages PR, cut a beta or stable release, verify publishing, and polish GitHub release notes. Also use when asked whether an open release PR is…
frame-macos-notification
Realistic macOS notification banner with app icon, title, and body, suited to video overlays or product teasers.
cut-release
Use this skill to cut an APM release from the current worktree: assess whether the cycle since the last tag warrants a patch or minor bump (semver discipline against the merged-since-last-tag diff), sanitize the [Unreleased] CHANGELOG block into a dated version block with one concise "so what" entry per merged PR…
release
Run the local Agent Safehouse release flow: inspect commits since the last published release, propose the next SemVer version and changelog, present a dry-run for confirmation, then update changelog, publish the GitHub release, and publish the stable Homebrew tap when confirmed.
changelog-draft
Generate a reviewable changelog draft from PRs merged in a release range. Extracts explicit CHANGELOG markers, classifies unmarked PRs, adds external contributor attribution, and outputs markdown + JSON artifacts. Does NOT mutate channelversions.json.
release-peekaboo
Peekaboo release: notarization, npm/GitHub release, appcast, verify, closeout.