Borrowing it
Nothing to install: this file belongs to statecrafting/spec-spine. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/statecrafting/spec-spine/main/.claude/skills/ship/SKILL.mdgit clone --depth 1 https://github.com/statecrafting/spec-spineWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/statecrafting/spec-spine/ship)<a href="https://agentmods.dev/skills/statecrafting/spec-spine/ship"><img src="https://agentmods.dev/badge/skills/statecrafting/spec-spine/ship/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/statecrafting/spec-spine/ship"><img src="https://agentmods.dev/badge/skills/statecrafting/spec-spine/ship.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.01450 |
| Opus 5 | $0.00026 | $0.00725 |
| Sonnet 5 | $0.00010 | $0.00290 |
| Haiku 4.5 | $0.00005 | $0.00145 |
Grade A, and why
ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/ship: gate, review, commit, PR
Sequences the steps that turn a working tree into a PR. This is the
"Ship" step of AGENTS.md "Working the backlog". Bound by
.claude/rules/orchestrator-rules.md (checkpoints are real stops) and
.claude/rules/adversarial-prompt-refusal.md (never edit an owning spec
to make the gate pass). The gate is the spec-spine invocation
AGENTS.md names; if it is missing, run /setup.
Step 0: preflight
git branch --show-current. The branch must be a feature branch, named after the spec id when the change implements one. On the default branch, STOP and create the branch first (git switch -c <spec-id>); thePreToolUsehook refuses a push to the default branch regardless.git status --short. Confirm the changes are the intended set: the spec's territory, the spec's ownspec.md(frontmatter flipped, decision entries recorded), and the regenerated derived shards. Surface anything unexpected before proceeding.git fetch origin mainso the coupling gate has a base.
Step 1: run the gate locally
Run the gate exactly as AGENTS.md lists it under "Run the gate before
every commit". The governance floor:
spec-spine compile
spec-spine index
spec-spine lint --fail-on-warn
spec-spine index check
spec-spine couple --base origin/main --head HEAD
spec-spine index coverage --fail-on-untraced # when [coupling] require_ownership is on
then the stack's own build, tests, and lints. Stop on the first failure (orchestrator rule: halt, never continue silently). Outcomes:
- All green: continue to Step 2.
index checkstale (exit 2):spec-spine index, stage the derived directory, and re-run. The shards are committed with the change they describe.coupledrift (C-001): a changed path is claimed by a spec that did not change. Two legitimate paths, chosen explicitly:- Fix the coupling. The path belongs to the spec you are
implementing: add it to that spec's
establishes, or declare anextendsedge on the owning spec's unit in your spec's frontmatter. The gate enforces the declared graph, not prose. Do NOT edit the other spec to retroactively justify code that contradicts its design: that is a coherence-guard halt; surface the contradiction and stop. - Waiver. A cited
Spec-Drift-Waiver: <reason>line in the PR body. CHECKPOINT: requires explicit human approval in this session. A waiver is a human instrument; standing authorization (below) never covers it.
- Fix the coupling. The path belongs to the spec you are
implementing: add it to that spec's
coupleunclaimed (C-002): a source file no spec specifically claims. Claim it in the implementing spec'sestablisheslist; the ownership ratchet has no waiver-free path by design.index coverage --fail-on-untracedlists a file: same remedy asC-002.- A stack gate fails: fix it. Never disable a test, never loosen a lint, never regenerate a never-touch artefact the path-scoped rules name (that is a human decision; stop and report).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 130 lines · 51 tokens per session scan A d1683a5bb5dc
ship is a skill published in the GitHub repository statecrafting/spec-spine (10 stars, last pushed today), licensed Apache-2.0. It adds 51 tokens to every session and 1,450 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other skills, from other repositories
github-copilot-upgrader
Use this to update the Github Copilot CLI/SDK.
workflow-patterns
Use this skill when implementing tasks according to Conductor's TDD workflow, handling phase checkpoints, managing git commits for tasks, or understanding the verification protocol.
meta-pre-commit-quality-gate
Run three quality gates (ruff + mypy + pytest) in parallel over the staged diff, then arbitrate a single BLOCK/APPROVE verdict. Use before committing changes locally when you want a comprehensive pre-commit gate beyond per-file linting — exactly the same gate set CI enforces.
nw-quality-framework
Quality gates - 11 commit readiness gates, build/test protocol, validation checkpoints, and quality metrics.
strict-tdd
Strict RED->GREEN->REFACTOR test-driven development with enforcement. Never write production code before a failing test. Atomic commits per TDD cycle.
Changelog Test Mapper
Map changelog entries and release notes to affected test cases, ensuring every user-facing change has corresponding test coverage verification.