toss-invest-sdk: Skill for Claude Code

.agents/skills/toss-api-release/SKILL.md

toss-api-release is a skill for Claude Code, Codex from wi9ine/toss-invest-sdk. It costs 53 tokens per session (1,098 once invoked), scanned A, original, MIT.

A release workflow for checking the official Toss Securities REST API description, updating its SDK and MCP server, and publishing a tagged release when explicitly authorized.

In plain words
What is it for?
It helps compare OpenAPI versions, regenerate or update the SDK, prepare a release, create a version tag, and push changes that trigger the release automation.
Why use it?
It reduces the risk of shipping an SDK based on an outdated API while protecting the repository from unsafe changes or accidental publishing.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is wi9ine/toss-invest-sdk's own configuration. It tells Claude Code and Codex how to work on toss-invest-sdk itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything toss-invest-sdk configures →

Reuse

Borrowing it

Nothing to install: this file belongs to wi9ine/toss-invest-sdk. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/wi9ine/toss-invest-sdk/main/.agents/skills/toss-api-release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/wi9ine/toss-invest-sdk

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for toss-api-release

README.md
[![agentmods](https://agentmods.dev/badge/skills/wi9ine/toss-invest-sdk/toss-api-release/github.svg)](https://agentmods.dev/skills/wi9ine/toss-invest-sdk/toss-api-release)
Your own site
<a href="https://agentmods.dev/skills/wi9ine/toss-invest-sdk/toss-api-release"><img src="https://agentmods.dev/badge/skills/wi9ine/toss-invest-sdk/toss-api-release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for toss-api-release

Your own site · 80×15
<a href="https://agentmods.dev/skills/wi9ine/toss-invest-sdk/toss-api-release"><img src="https://agentmods.dev/badge/skills/wi9ine/toss-invest-sdk/toss-api-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 53 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,098 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00053 $0.01098
Opus 5.5 $0.00021 $0.00439
Sonnet 5.5 $0.00011 $0.00220
Haiku 4.5 $0.00005 $0.00110

Measured yesterday against content hash 2ffdea739313, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

toss-api-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/toss-api-release/SKILL.md · 32 lines

How it starts

The opening of the file, as written. The whole thing — 32 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Toss API update and release

Run this workflow from the root of the toss-invest-sdk repository. An explicit invocation requesting this release authorizes the release commit, version tag, and normal push that triggers GitHub Actions. A request to check or prepare only does not authorize those actions. Never force-push, amend, reset, overwrite tags, include unrelated work, or publish directly as a workaround.

1. Check the repository and upstream

  1. Read applicable repository instructions. Inspect git status -sb, the current branch, recent commits, the remote, packages/sdk/openapi-ts.config.ts, packages/sdk/src/generated/spec.json, and .github/workflows/publish.yml. Fetch the remote branch and tags without changing the working tree. If there are staged or unstaged changes, an unexpected branch, local/remote divergence, or unrelated unpushed commits, stop before modifying or pushing and explain what needs resolution; never rewrite the user's work.
  2. Download the configured official latest/openapi.json to a temporary file. Compare its info.version, paths, operations, and schemas with the saved spec. Compare versions as semver. If the official version is not greater, do not create a release. If the content changed despite the same version, report the difference and ask how to proceed. If the version is invalid, lower, or the download fails, report the problem instead of guessing.

2. Update the SDK and MCP

  1. Run pnpm generate. Confirm the saved generated spec matches the downloaded snapshot as parsed JSON. If upstream changed during generation, recheck before continuing; never silently release an inconsistent snapshot. Review the spec and generated diff for added, removed, and changed endpoints and request/response schemas.
  2. Inspect affected callers, apps/mcp/src/server.ts, generated request schemas, tests, exports, and docs. Adapt existing MCP tools to changed API contracts. Expose new applicable REST operations as MCP tools using existing SDK and Zod patterns, descriptions, and annotations. Account calls must use the selected account header. New trading mutations must retain the existing opt-in and order safety rules. Do not silently expose mutations as read-only. If a safe mapping is unclear, stop and explain rather than inventing behavior.
  3. Update relevant tests and apps/mcp/README.md. Check request serialization, validation, and pagination when applicable. Add focused tests for new behavior and compatibility; do not test only generated implementation details.

Read the full file on GitHub · 32 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 32 lines · 53 tokens per session scan A 2ffdea739313

Subscribe to this mod's changes

toss-api-release is a skill published in the GitHub repository wi9ine/toss-invest-sdk (0 stars, last pushed yesterday), licensed MIT. It adds 53 tokens to every session and 1,098 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-06.

Related

toss-api-release compared with skills from other repositories

toss-api-release next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
toss-api-releasewi9ine/toss-invest-sdkSkill0yesterdayMITA53Claude Code, Codex
managing-endpoint-versionsPostHog/posthog-fossSkill728yesterdayMITA111Claude Code, Codex
breaking-changes-managementPracticalSwan/agent-skillsSkill2418d agoMITA43Codex
releasethedotmack/claude-memSkill114kyesterdayApache-2.0A13Claude Code
release-notesphuryn/pm-skillsSkill28k8d agoMITA57Claude Code
multi-agent-release-managerchromium/chromiumSkill25kyesterdayBSD-3-ClauseA27Claude Code, Codex
pack-submitaeonfun/aeonSkill788yesterdayMITA27Claude Code, Codex