xp-harness: Skill for Claude Code

.claude/skills/release/SKILL.md

release is a skill for Claude Code from sei-newbear/xp-harness. It costs 103 tokens per session (3,595 once invoked), scanned A, original, MIT.

A release procedure for publishing a new version tag and GitHub Release for the xp-harness project. It uses semantic versioning, a numbering system where patch, minor, and major changes communicate the size and compatibility impact of a release.

In plain words
What is it for?
Use it to inspect tags and commits, decide whether a change is a patch, minor, or major release, prepare user- and developer-facing notes, and create the GitHub release.
Why use it?
It replaces a manual, inconsistent release process with a shared sequence for checking the branch, choosing the version, gathering changes, and writing release notes.

Skill for Claude Code

Written for Claude Code: installed under .claude/. Also seen: reads .claude/ paths; mentions CLAUDE.md.

This is sei-newbear/xp-harness's own configuration. It tells Claude Code how to work on xp-harness itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything xp-harness configures →

Reuse

Borrowing it

Nothing to install: this file belongs to sei-newbear/xp-harness. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/sei-newbear/xp-harness/main/.claude/skills/release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/sei-newbear/xp-harness

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for release

README.md
[![agentmods](https://agentmods.dev/badge/skills/sei-newbear/xp-harness/release/github.svg)](https://agentmods.dev/skills/sei-newbear/xp-harness/release)
Your own site
<a href="https://agentmods.dev/skills/sei-newbear/xp-harness/release"><img src="https://agentmods.dev/badge/skills/sei-newbear/xp-harness/release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for release

Your own site · 80×15
<a href="https://agentmods.dev/skills/sei-newbear/xp-harness/release"><img src="https://agentmods.dev/badge/skills/sei-newbear/xp-harness/release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 103 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,595 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00103 $0.03595
Opus 5.5 $0.00041 $0.01438
Sonnet 5.5 $0.00021 $0.00719
Haiku 4.5 $0.00010 $0.00360

Measured 2mo ago against content hash 0e4558abdffd, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/release/SKILL.md · 209 lines

How it starts

The opening of the file, as written. The whole thing — 209 lines — stays where its author put it; the contents beside it link to each section on GitHub.

release skill

なぜこの skill があるか

xp-harness のリリース (= 新 version tag + GitHub Release 作成) は手動運用。 手順を skill 化することで、 改修者間でリリースの流儀 / リリースノートのスタイルを揃える。 「GitHub Actions で release notes 自動化」 (kanban backlog の項目) が完了するまでは手動運用が続く想定。

やること

skill が呼ばれたら以下の Step を順番に実行する。

Step 1: 現状確認

  • 現在の tag 一覧: git fetch --tags origin && git tag -l | sort -V
  • origin/main の最新 commit: git fetch origin && git log --oneline origin/main -5
  • 直前のリリース tag (= 最新の vX.X.X tag) を特定
  • 現 branch が origin/main と同期しているか確認 (= リリース対象は main の最新)

Step 2: 次バージョン判定 (semver)

変更内容に応じて semver で判定:

  • patch up (= 0.x.X+1): バグ修正のみ
  • minor up (= 0.X+1.0): 新機能追加、 後方互換あり
  • major up (= X+1.0.0): 破壊的変更 / 後方互換なし

判定は変更内容 (= 前回 tag → 現在の commit 一覧) を main session が判断し、 依頼者と認識合わせしてから確定する。

Step 3: リリースノート材料収集

  • 前回 tag → 現在の commit 一覧: git log --oneline <prev-tag>..origin/main
  • 過去のリリースノートのスタイルを参考に: gh release view <prev-tag> で前回の body を確認

参考にするのは書式 (= section 構成・分類の仕方) であって、項目の粒度ではない。前回が新 skill 追加で厚く書いた回でも、今回が既存 skill への追記なら必要な量は変わる。完成形は判断基準より強く効くので、見た後は必ず Step 4 の書きっぷり・長さの規律を通してから書く。

Step 4: リリースノート作成

リリースノートは ユーザー向け / 開発者向けを明確に分ける:

<簡潔な 1 行サマリ>

## ユーザー向け (= xp-harness を使う人)

### Added
- ...

### Changed
- ...

## 開発者向け (= xp-harness を改修する人)

### Added
- ...

### Changed
- ...

## Install (新規 consumer 向け)

(apm install コマンド)

## Update (既存 consumer 向け、 <前 version> → <新 version>)

`apm.yml` の依存指定を新バージョンに書き換える:

```diff
 dependencies:
   apm:
-  - sei-newbear/xp-harness#<前 version>
+  - sei-newbear/xp-harness#<新 version>
```

そのあと:

```bash
apm install --target claude
# Content hash mismatch が出たら (= APM のサプライチェーン検出機構、想定挙動)
apm install --update --target claude
```

詳細は README "Update" セクション参照。

## Note

(後方互換性 / 状態 note)

リリースノートは一時ファイル (例: /tmp/release-notes-vX.X.X.md) に書く。

## Update セクションが必要な理由

APM 0.12.x はタグを跨いだ更新コマンド (npm でいう npm install pkg@latest) を持たない。 既存 consumer は apm.yml を手で書き換える必要があり、 リリースノートに手順がないと「apm install --update で上がるはず」と試してハマる (= v0.2.0 アップデート時に別 consumer プロジェクトで実際に発生)。

Read the full file on GitHub · 209 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 209 lines · 103 tokens per session scan A 0e4558abdffd

Subscribe to this mod's changes

release is a skill published in the GitHub repository sei-newbear/xp-harness (9 stars, last pushed 1mo ago), licensed MIT. It adds 103 tokens to every session and 3,595 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.