atifact: Skill for Claude Code

.github/skills/bump-version/SKILL.md

bump-version is a skill for Claude Code, Codex from waldekmastykarz/atifact. It costs 57 tokens per session (849 once invoked), scanned A, original, MIT.

A release-preparation skill that chooses a semantic version number from recent Git commits and applies the corresponding version update. Semantic versioning uses major, minor, and patch numbers to describe the scale of changes.

In plain words
What is it for?
It is for reviewing commits since the latest release tag and applying a major, minor, or patch version bump with npm.
Why use it?
It removes the guesswork of deciding whether changes are breaking, add functionality, or only fix and maintain the project.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

This is waldekmastykarz/atifact's own configuration. It tells Claude Code and Codex how to work on atifact itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything atifact configures →

Reuse

Borrowing it

Nothing to install: this file belongs to waldekmastykarz/atifact. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/waldekmastykarz/atifact/main/.github/skills/bump-version/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/waldekmastykarz/atifact

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bump-version

README.md
[![agentmods](https://agentmods.dev/badge/skills/waldekmastykarz/atifact/bump-version.svg)](https://agentmods.dev/skills/waldekmastykarz/atifact/bump-version)
Your own site
<a href="https://agentmods.dev/skills/waldekmastykarz/atifact/bump-version"><img src="https://agentmods.dev/badge/skills/waldekmastykarz/atifact/bump-version.svg" alt="Measured on agentmods" height="20"></a>
Per session 57 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 849 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00057 $0.00849
Opus 5 $0.00028 $0.00425
Sonnet 5 $0.00011 $0.00170
Haiku 4.5 $0.00006 $0.00085

Measured 8d ago against content hash 6be8c166daec, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

bump-version scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/skills/bump-version/SKILL.md · 81 lines

How it starts

The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Bump Version

Analyze commits since the last release tag and determine the appropriate semver version bump, then apply it using npm version.

Workflow

Follow these steps in order. Do not skip the confirmation step.

Step 1: Identify the Latest Tag

Run git tag --sort=-v:refname | head -1 to find the most recent version tag. Tags follow the v* pattern (e.g., v1.0.3).

Step 2: List Commits Since the Last Tag

Run git log <latest-tag>..HEAD --oneline to retrieve all unreleased commits. If there are no commits since the last tag, inform the user and stop.

Step 3: Determine the Version Bump Type

Analyze each commit message to classify the version bump:

  • major — Any commit indicates a breaking change. Look for:
    • BREAKING CHANGE or BREAKING: in the message
    • ! after the type (e.g., feat!:, fix!:)
  • minor — Any commit adds new functionality. Look for:
    • feat: or feat(scope): prefix
    • Commits describing new commands, options, or capabilities
  • patch — All other changes. Common indicators:
    • fix:, deps:, chore:, docs:, refactor:, perf:, test:, ci: prefixes
    • Dependency bumps, bug fixes, maintenance tasks

Apply the highest applicable level: if any commit is major, bump major. If any commit is minor (and none are major), bump minor. Otherwise, bump patch.

Step 4: Confirm with the User

STOP — Do not proceed without user confirmation.

Present the analysis to the user:

  1. List the commits since the last tag
  2. State the recommended bump type and the reasoning
  3. Show what the new version number will be (current → new)
  4. Ask the user to confirm or choose a different bump type

Step 5: Update the Changelog

STOP — Read CHANGELOG.md before writing. Match the existing format and style.

Add a new entry at the top of CHANGELOG.md (below the # Changelog heading) for the new version:

  1. Use today's date and the new version number
  2. Add a compare link to the previous tag: [X.Y.Z](https://github.com/waldekmastykarz/atifact/compare/vPREV...vX.Y.Z)
  3. Group changes into sections: Features, Bug Fixes, Maintenance (only include sections that apply)
  4. Write human-friendly descriptions, not raw commit messages
  5. Only include user-facing changes — skip dependency bumps, CI changes, and internal refactors unless they affect users (e.g., minimum Node.js version change is user-facing)
  6. Stage the file: git add CHANGELOG.md

Read the full file on GitHub · 81 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 81 lines · 57 tokens per session scan A 6be8c166daec

Subscribe to this mod's changes

bump-version is a skill published in the GitHub repository waldekmastykarz/atifact (5 stars, last pushed 15d ago), licensed MIT. It adds 57 tokens to every session and 849 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.