Borrowing it
Nothing to install: this file belongs to statecrafting/spec-spine. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/statecrafting/spec-spine/main/.claude/skills/ship/SKILL.mdgit clone --depth 1 https://github.com/statecrafting/spec-spineWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/statecrafting/spec-spine/ship)<a href="https://agentmods.dev/skills/statecrafting/spec-spine/ship"><img src="https://agentmods.dev/badge/skills/statecrafting/spec-spine/ship/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/statecrafting/spec-spine/ship"><img src="https://agentmods.dev/badge/skills/statecrafting/spec-spine/ship.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.01560 |
| Opus 5.5 | $0.00020 | $0.00624 |
| Sonnet 5.5 | $0.00010 | $0.00312 |
| Haiku 4.5 | $0.00005 | $0.00156 |
Grade A, and why
ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/ship: gate, review, commit, PR
Sequences the steps that turn a working tree into a PR. This is the
"Ship" step of AGENTS.md "Working the backlog". Bound by
AGENTS.md "Orchestrator rules" (checkpoints are real stops) and
AGENTS.md "Adversarial prompt refusal" (never edit an owning spec
to make the gate pass). The gate is the spec-spine invocation
AGENTS.md names; if it is missing, run /setup.
Step 0: preflight
git branch --show-current. The branch must be a feature branch, named after the spec id when the change implements one. On the default branch, STOP and create the branch first (git switch -c <spec-id>); thePreToolUsehook refuses a push to the default branch regardless.git status --short. Confirm the changes are the intended set: the spec's territory, the spec's ownspec.md(frontmatter flipped, decision entries recorded), and the regenerated derived shards. Surface anything unexpected before proceeding.git fetch origin mainso the coupling gate has a base.
Step 1: run the gate locally
Run the gate exactly as AGENTS.md lists it under "Run the gate before
every commit". The governance floor:
spec-spine compile
spec-spine index
sh scripts/statecraft/gate.sh governance
BASE_SHA="$(git symbolic-ref --short refs/remotes/origin/HEAD 2>/dev/null || echo origin/main)" \
HEAD_SHA=HEAD PR_BODY="${PR_BODY:-}" sh scripts/statecraft/gate.sh couple
sh scripts/statecraft/gate.sh code
then the stack's own build, tests, and lints. Stop on the first failure (orchestrator rule: halt, never continue silently). Outcomes:
- All green: continue to Step 2.
governancereports stale output:spec-spine index(orcompile, per the tree it named), stage the derived directory, and re-run. The shards are committed with the change they describe.coupledrift (C-001): a changed path is claimed by a spec that did not change. Two legitimate paths, chosen explicitly:- Fix the coupling. The path belongs to the spec you are
implementing: add it to that spec's
establishes, or declare anextendsedge on the owning spec's unit in your spec's frontmatter. The gate enforces the declared graph, not prose. Do NOT edit the other spec to retroactively justify code that contradicts its design: that is a coherence-guard halt; surface the contradiction and stop. - Waiver. A cited
Spec-Drift-Waiver: <reason>line in the PR body. CHECKPOINT: requires explicit human approval in this session. A waiver is a human instrument; standing authorization (below) never covers it.
- Fix the coupling. The path belongs to the spec you are
implementing: add it to that spec's
coupleunclaimed (C-002): a source file no spec specifically claims. Claim it in the implementing spec'sestablisheslist; the ownership ratchet has no waiver-free path by design.- The governance mode's coverage check lists a file: same remedy as
C-002. - A stack gate fails: fix it. Never disable a test, never loosen a lint, never regenerate a never-touch artefact the path-scoped rules name (that is a human decision; stop and report).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -4 lines 981c0c8b3969
- 1mo ago Changed 9750d6cc382a
- 1mo ago Changed · +9 lines c7f8d1eff7ed
- 1mo ago Changed b93accc73684
- 1mo ago Changed 87df881224a7
- 1mo ago Changed 9adccef05aca
- 1mo ago Changed · +1 lines 9d3956a51583
- 2mo ago First seen · 130 lines · 51 tokens per session scan A d1683a5bb5dc
ship is a skill published in the GitHub repository statecrafting/spec-spine (11 stars, last pushed 8d ago), licensed Apache-2.0. It adds 51 tokens to every session and 1,560 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
ship compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| shipstatecrafting/spec-spine | Skill | 11 | 8d ago | Apache-2.0 | A | 51 | Claude Code |
| create-prprisma/orm | Skill | 48k | yesterday | Apache-2.0 | A | 48 | Claude Code, Codex |
| git-commitThinkInAIXYZ/deepchat | Skill | 6.4k | yesterday | Apache-2.0 | A | 15 | Claude Code, Codex |
| repo-syncdavidondrej/skills | Skill | 4.3k | 3d ago | MIT | A | 25 | Claude Code, Codex |
| engineer-bot-opsmakecindy/cindy | Skill | 9.3k | yesterday | Apache-2.0 | A | 57 | Claude Code, Codex |
| mcore-split-prNVIDIA/skills | Skill | 3.9k | yesterday | Apache-2.0 | A | 25 | Claude Code |
| git-commit-writermergisi/awesome-openclaw-agents | Skill | 4.1k | 2d ago | MIT | A | 53 | Claude Code, Codex |