ai-memex-cli: Skill for Claude Code

.claude/skills/release/SKILL.md

release is a skill for Claude Code from zelixag/ai-memex-cli. It costs 68 tokens per session (1,787 once invoked), scanned A, original, MIT.

A release workflow for publishing ai-memex-cli, a command-line tool, to npm, the JavaScript package registry.

In plain words
What is it for?
Use it when explicitly preparing a new public package release or beta release, including version bumps and publishing checks.
Why use it?
It coordinates version changes, documentation updates, tests, publishing, tags, and GitHub Releases, while offering a beta channel and dry-run mode.

Skill for Claude Code

Written for Claude Code: installed under .claude/. Also seen: reads .claude/ paths; mentions Claude Code.

This is zelixag/ai-memex-cli's own configuration. It tells Claude Code how to work on ai-memex-cli itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything ai-memex-cli configures →

Reuse

Borrowing it

Nothing to install: this file belongs to zelixag/ai-memex-cli. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/zelixag/ai-memex-cli/main/.claude/skills/release/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/zelixag/ai-memex-cli

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for release

README.md
[![agentmods](https://agentmods.dev/badge/skills/zelixag/ai-memex-cli/release/github.svg)](https://agentmods.dev/skills/zelixag/ai-memex-cli/release)
Your own site
<a href="https://agentmods.dev/skills/zelixag/ai-memex-cli/release"><img src="https://agentmods.dev/badge/skills/zelixag/ai-memex-cli/release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for release

Your own site · 80×15
<a href="https://agentmods.dev/skills/zelixag/ai-memex-cli/release"><img src="https://agentmods.dev/badge/skills/zelixag/ai-memex-cli/release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 68 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,787 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00068 $0.01787
Opus 5.5 $0.00027 $0.00715
Sonnet 5.5 $0.00014 $0.00357
Haiku 4.5 $0.00007 $0.00179

Measured 1mo ago against content hash e19ff8967880, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 16 executable files (scripts/_shared/changelog.mjs, scripts/_shared/log.mjs, scripts/_shared/pkg.mjs, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/release/SKILL.md · 127 lines

How it starts

The opening of the file, as written. The whole thing — 127 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Release ai-memex-cli

This skill drives the full publish pipeline for ai-memex-cli. It is invoked by the user (never proactively): npm publish is irreversible after 72h, GitHub Releases are public, and git tags propagate fast.

When to use

  • User explicitly asks to release / publish / cut a new version
  • Triggers (zh): "发版"、"发个新版本"、"上传新包"、"发布到 npm"、"打 tag"
  • Triggers (en): "release", "publish", "ship a new version", "cut v0.3.0"

Do NOT trigger for: "ready to release?", "what's left before release?" — those are status questions, not commands.

Architecture

11 independent phase scripts under scripts/, each a Node .mjs runnable on its own. An orchestrator (scripts/orchestrator.mjs) chains them with confirmation prompts. pnpm release invokes the orchestrator.

Each phase prints a trailing line ::summary:: <json> on stdout — both the orchestrator and a driving agent can parse it to make decisions.

scripts/
├── orchestrator.mjs       # pnpm release entry
├── 01-preflight.mjs       # read-only checks
├── 02-sync-docs.mjs       # invokes `claude -p` to update CHANGELOG/README/website
├── 03-bump-version.mjs    # writes package.json
├── 04-build-all.mjs       # pnpm build + (conditional) website → docs/
├── 05-test.mjs            # pnpm test:run
├── 06-pack-preview.mjs    # pnpm pack --dry-run + content audit
├── 07-git-finalize.mjs    # commit + tag, local only
├── 08-publish.mjs         # pnpm publish [--tag beta]
├── 09-git-push.mjs        # push HEAD + tag
├── 10-github-release.mjs  # gh release create (skipped for beta)
├── 11-verify.mjs          # npm view + gh release view
└── _shared/               # log / shell / pkg / changelog helpers

Quick reference

Goal Command
patch stable pnpm release
minor stable pnpm release --bump minor
major stable pnpm release --bump major
start a beta cycle pnpm release --bump prepatch --beta
beta continuation pnpm release --beta
graduate beta → stable pnpm release --bump release
dry-run preview pnpm release --dry-run
docs already match pnpm release --manual-docs
CI / unattended pnpm release --yes --push

Read the full file on GitHub · 127 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 127 lines · 68 tokens per session scan A e19ff8967880

Subscribe to this mod's changes

release is a skill published in the GitHub repository zelixag/ai-memex-cli (9 stars, last pushed 5mo ago), licensed MIT. It adds 68 tokens to every session and 1,787 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.