stigmergy: Skill for Claude Code

.claude/skills/validate-deployment/SKILL.md

validate-deployment is a skill for Claude Code from sturlese/stigmergy. It costs 33 tokens per session (1,002 once invoked), scanned A, original, Apache-2.0.

A release-verification procedure for Stigmergy deployments. It checks running services, configuration, logs, data stores, and read paths after a release.

In plain words
What is it for?
Use it after deployments or releases spanning multiple systems to test health checks, MCP reads, search results, pages, entities, logs, and index reconciliation.
Why use it?
It helps reveal unhealthy processes, missing configuration, leaked secrets in logs, stale code, broken searches, and mismatches between stored data and indexes.

Skill for Claude Code

Written for Claude Code: installed under .claude/.

This is sturlese/stigmergy's own configuration. It tells Claude Code how to work on stigmergy itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything stigmergy configures →

Reuse

Borrowing it

Nothing to install: this file belongs to sturlese/stigmergy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/sturlese/stigmergy/main/.claude/skills/validate-deployment/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/sturlese/stigmergy

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for validate-deployment

README.md
[![agentmods](https://agentmods.dev/badge/skills/sturlese/stigmergy/validate-deployment.svg)](https://agentmods.dev/skills/sturlese/stigmergy/validate-deployment)
Your own site
<a href="https://agentmods.dev/skills/sturlese/stigmergy/validate-deployment"><img src="https://agentmods.dev/badge/skills/sturlese/stigmergy/validate-deployment.svg" alt="Measured on agentmods" height="20"></a>
Per session 33 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,002 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00033 $0.01002
Opus 5 $0.00016 $0.00501
Sonnet 5 $0.00007 $0.00200
Haiku 4.5 $0.00003 $0.00100

Measured 8d ago against content hash 8aa5514ef7ab, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

validate-deployment scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/validate-deployment/SKILL.md · 99 lines

How it starts

The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Validate a Stigmergy deployment

Use this procedure after a deployment or a release spanning more than one subsystem. Read deployment coordinates from the gitignored .env and Fly secrets; never print secret values.

1. Preflight

  • Confirm every Fly process group is running the intended image and passes its health checks.
  • Confirm Postgres, the private evidence bucket, the GitHub App, Slack credentials, and embedding credentials are configured without displaying them.
  • Confirm the deployed knowledge-repository commit contains the target control files and pins the released platform commit in both workflows.
  • Inspect recent logs for restart loops, tracebacks, secret-bearing messages, and repeated jobs.

For a clean-cut test release, run the guarded reset before deployment validation. It must leave a fresh target schema, an empty queue/index/object namespace, and the empty target knowledge scaffold.

2. Read path through MCP

After the first full rebuild, exercise all read tools with an authenticated identity:

  • search_brain in both corpus languages and inspect lexical/vector ranking arms;
  • read_page on a visible result and on an unknown path;
  • list_entities and describe_entity when an entity exists;
  • ask for one supported and one unsupported answer, checking citations and honest refusal.

Repeat a restricted search/read with identities on both sides of an ACL boundary. Unknown, hidden, and unauthorized pages and entity IDs must have indistinguishable external responses.

3. Unified capture and writer

Submit through the official local bridge:

  • exact text;
  • a local digital PDF;
  • a local scanned PDF;
  • a private Drive PDF using local Google OAuth when credentials are available.

Observe brain_submissions reach landed. Each capture must retain exact original bytes, create one neutral sources/YYYY/MM/<capture-id>.md path, and land one Git commit with one Changes record. A retry with the same idempotency identity must not create another commit.

Read the full file on GitHub · 99 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 99 lines · 33 tokens per session scan A 8aa5514ef7ab

Subscribe to this mod's changes

validate-deployment is a skill published in the GitHub repository sturlese/stigmergy (9 stars, last pushed 12d ago), licensed Apache-2.0. It adds 33 tokens to every session and 1,002 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

memobase

A Russian-language skill for searching a local knowledge base built from documents and other sources such as web pages, YouTube, audio, and Obsidian notes.

maximskorohod/memobase · 25 tokens

knowsift

Compile collected videos, articles, documents, and research into layered, traceable knowledge documents or fail-closed claim certificates. Use when a user needs research synthesis that separates supported knowledge, conditional findings, practitioner experience, viewpoints, anecdotes, disputes, and rejected claims; do…

nhppyqys/knowsift · 69 tokens

kb-log

A skill for recording important technical decisions and debugging lessons in a team knowledge base or a local ledger file.

riemannulus/knowledge-base · 124 tokens

kb-brief

A project-start briefing that searches a team's knowledge base for past pitfalls, decisions, recent changes, and people familiar with the work. It is intended for new tasks, issues, and bug fixes.

riemannulus/knowledge-base · 102 tokens

kb-wrap

A procedure for transferring recorded project decisions and lessons from a local ledger into a team knowledge base, then clearing the processed entries.

riemannulus/knowledge-base · 100 tokens

fortemi-roadmap-skill

Advance the Fortemi delivery roadmap by one concrete increment and document the progress. Reads .aiwg/planning/roadmap.md, picks the next actionable item respecting phase gating, does or dispatches the work, then records progress back into the roadmap. Built for fresh sessions and simple loops.

Fortemi/fortemi · 65 tokens