Borrowing it
Nothing to install: this file belongs to richardwooding/file-search-on. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/richardwooding/file-search-on/main/.claude/skills/cut-release/SKILL.mdgit clone --depth 1 https://github.com/richardwooding/file-search-onWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/richardwooding/file-search-on/cut-release)<a href="https://agentmods.dev/skills/richardwooding/file-search-on/cut-release"><img src="https://agentmods.dev/badge/skills/richardwooding/file-search-on/cut-release/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/richardwooding/file-search-on/cut-release"><img src="https://agentmods.dev/badge/skills/richardwooding/file-search-on/cut-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00128 | $0.02253 |
| Opus 5.5 | $0.00051 | $0.00901 |
| Sonnet 5.5 | $0.00026 | $0.00451 |
| Haiku 4.5 | $0.00013 | $0.00225 |
Grade A, and why
cut-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 135 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Cut Release
A release publishes to three independent targets in one shot. Pushing a tag matching v* to origin triggers .github/workflows/release.yml, which runs GoReleaser v2 and produces:
- GitHub Release — six archives (linux/darwin/windows × amd64/arm64) +
checksums.txt. - OCI image —
ghcr.io/richardwooding/file-search-on:<version>(and:latestfor non-prerelease). - Homebrew cask — auto-commit on
richardwooding/homebrew-tap, installable viabrew install richardwooding/tap/file-search-on.
This skill encodes the pre-flight, the tag-and-push, the verification, and the rollback. Tag pushes are public and hard to reverse — confirm version with the user before pushing if there's any ambiguity.
GitHub Marketplace action. The repo-root
action.yml(a composite "review gate" action) is published to the Marketplace. GoReleaser creates releases via the API and cannot tick the Marketplace checkbox, so this is a one-time manual step done once: on a published release, click Edit, check "Publish this Action to the GitHub Marketplace", confirm "Everything looks good!", pick categories (Code quality + Code review), and save. After the first publish, every subsequentv*release automatically becomes a new Marketplace version — no per-release action needed. The action downloads the release binary matching its ref, so the action version tracks the CLI version automatically; just keepaction.yml's example version references roughly current.
Quick start
# 1. Pre-flight (all of these must be clean)
git checkout main
git pull --ff-only origin main
git status # clean working tree
gh run list --branch main --limit 1 # latest CI run on main is green
git tag --sort=-v:refname | head -1 # current latest tag
goreleaser check # validates .goreleaser.yaml
# 2. Pick the new version using semver
# feat: → minor bump (v0.X.0)
# fix:/chore: → patch bump (v0.X.Y+1)
# breaking change → major bump (vX+1.0.0) — until 1.0.0, breaking ⇒ minor
# 3. Tag and push
git tag -a v0.X.Y -m "v0.X.Y — <one-line summary>"
git push origin v0.X.Y
# 4. Watch the workflow — bounded by a hard timeout so an orphaned
# runner can't block forever (see "Orphaned runs" below).
RUN_ID=$(gh run list --workflow=release.yml --limit 1 --json databaseId -q '.[0].databaseId')
timeout 600 gh run watch "$RUN_ID" --exit-status || echo "watch exited (timeout or run failed); checking artifacts directly"
# 5. Verify all three publish targets — THIS is the source of truth,
# not the workflow status.
bash .claude/skills/cut-release/scripts/verify_release.sh v0.X.Y
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 135 lines · 128 tokens per session scan A 3c72dd739854
cut-release is a skill published in the GitHub repository richardwooding/file-search-on (5 stars, last pushed 4d ago), licensed MIT. It adds 128 tokens to every session and 2,253 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
cut-release compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| cut-releaserichardwooding/file-search-on | Skill | 5 | 4d ago | MIT | A | 128 | Claude Code |
| rea-changelog-updatemorluto/rea | Skill | 435k | today | MIT | A | 33 | Claude Code |
| codew-release-qa-sweepHmbown/CodeWhale | Skill | 41k | 5d ago | MIT | A | 31 | Claude Code, Codex |
| skillshare-changelogrunkids/skillshare | Skill | 2.9k | yesterday | MIT | A | 134 | Claude Code |
| githubAtomicBot-ai/atomic-agent | Skill | 3.4k | 8d ago | MIT | A | 48 | Claude Code, Codex |
| commit-prZaxbyHub/opencode-swarm | Skill | 518 | yesterday | MIT | A | 100 | Codex |
| installxiaotonng/pikiloom | Skill | 293 | 4d ago | MIT | A | 39 | Claude Code, Codex |