Borrowing it
Nothing to install: this file belongs to zackbart/connecta. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zackbart/connecta/main/.claude/skills/release/SKILL.mdgit clone --depth 1 https://github.com/zackbart/connectaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zackbart/connecta/release)<a href="https://agentmods.dev/skills/zackbart/connecta/release"><img src="https://agentmods.dev/badge/skills/zackbart/connecta/release/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zackbart/connecta/release"><img src="https://agentmods.dev/badge/skills/zackbart/connecta/release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.01008 |
| Opus 5.5 | $0.00019 | $0.00403 |
| Sonnet 5.5 | $0.00010 | $0.00202 |
| Haiku 4.5 | $0.00005 | $0.00101 |
Grade A, and why
release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Release connecta
Follow AGENTS.md's agent policy for release authorization and review, and its verification policy for release checks and Node versions.
Publishing a GitHub Release runs publish.yml,
which publishes both @zackbart/connecta-eve and @zackbart/connecta to npm.
They are already published packages and share every release version and tag.
Inputs
- Merged PR fragments under
.changes/, using the format in AGENTS.md;pnpm run check:changesvalidates them. - A hand-written narrative for the upcoming release: paragraphs, no headings.
Say what changes, what breaks, and what deployments can ignore. Write it to
a temporary file outside the repository and pass its path to
--narrative. Assembly keeps the final text inCHANGELOG.md; do not commit a duplicate release-note input.
Publishing prerequisite
Both packages need npm trusted publishing configured for zackbart/connecta,
workflow publish.yml. Confirm that configuration when preparing a release;
initial package creation and the first-helper bootstrap are complete. If a
publish reports a trusted-publisher configuration problem, the owner must repair
that account setting before retrying the same release. Do not create a placeholder
version or bump either package to work around a failed publish.
Steps
- Branch from current
origin/main. Bump the version inpackage.jsonwithpnpm version <version> --no-git-tag-version. Set the same version inpackages/connecta-eve/package.jsonwithpnpm --filter @zackbart/connecta-eve version <version> --no-git-tag-version --no-git-checks. The second command skips the clean-tree check because the core bump is already uncommitted. The helper and core share every release tag and version; retain both lockfiles. Settemplates/node/package.json's exact@zackbart/connectadependency to that version too. Runnode scripts/generate-version.mjsand commit its three generated version files with the manifests. When updating Eve, change its devDependency pin, supported peer range andpnpm-workspace.yaml's exactminimumReleaseAgeExcludeentry together. - Review release-status wording in
README.md,guides/,documentation/, andpackages/connecta-eve/README.mdbefore publishing. Search forpending,coming in,planned, andawaiting publication; check each occurrence against what this release actually includes. Prefer durable wording such as “available from ” for included features. Keep unmerged work marked planned, retain historical migration instructions, and leave released changelog sections unchanged. - Commit
CHANGELOG.mdand everything under.changes/first. Assembly refuses untracked or modified inputs. pnpm run changelog:assemble --version <version> --narrative <file> [--date YYYY-MM-DD]. It inserts## <version> — <date>, groups Added/Changed/Fixed/Removed/Security, marks breaking entries, and deletes the consumed fragments. Released sections stay untouched.- On failure or interruption:
git restore --source=HEAD --staged --worktree -- CHANGELOG.md .changes. - Review the assembled section, commit it with the deletions, and complete the release checks and PR review required by AGENTS.md.
- After merge, tag the merge commit
v<version>(must equalpackage.json; publish.yml verifies) and publish a GitHub Release with the narrative from that version'sCHANGELOG.mdsection. publish.yml reruns the two checks on their respective Node versions, then publishes the helper first and core second with provenance. Each step checksnpm view "$name@$version" versionand skips versions already on npm, so aworkflow_dispatchrerun with the same tag completes a half release. Never bump one package independently.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed 7bf6e65b1fc7
- 8d ago Changed · -10 lines a69fc0217337
- 9d ago Changed · -12 tokens per session 71b494d5a88e
- 10d ago Changed · +3 lines 4fc98635237c
- 12d ago Changed · +1 lines 3a54f09182bb
- 13d ago Changed · +37 lines a7463a913914
- 20d ago Changed a053e89b7ab2
- 29d ago First seen · 44 lines · 60 tokens per session scan A 6c9475b24207
release is a skill published in the GitHub repository zackbart/connecta (0 stars, last pushed yesterday), licensed MIT. It adds 48 tokens to every session and 1,008 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.
release compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| releasezackbart/connecta | Skill | 0 | yesterday | MIT | A | 48 | Claude Code |
| release-announcementpaperclipai/paperclip | Skill | 111k | yesterday | MIT | A | 42 | Claude Code, Codex |
| releasethedotmack/claude-mem | Skill | 114k | yesterday | Apache-2.0 | A | 13 | Claude Code |
| release-notesphuryn/pm-skills | Skill | 28k | 8d ago | MIT | A | 57 | Claude Code |
| multi-agent-release-managerchromium/chromium | Skill | 25k | yesterday | BSD-3-Clause | A | 27 | Claude Code, Codex |
| pack-submitaeonfun/aeon | Skill | 788 | yesterday | MIT | A | 27 | Claude Code, Codex |
| updater_guidesiddsachar/row-bot | Skill | 1.7k | yesterday | Apache-2.0 | A | 22 | Claude Code, Codex |