solomd: Skill for Claude Code

.claude/skills/store-submit/SKILL.md

store-submit is a skill for Claude Code from zhitongblog/solomd. It costs 139 tokens per session (1,728 once invoked), scanned A, original, MIT.

A browser-based workflow for publishing SoloMD releases to Google Play and Microsoft Partner Center. It uses a local browser-control service to operate store websites, while Apple releases use a separate App Store Connect API process.

In plain words
What is it for?
Use it to upload releases, set release notes and distribution options, and submit Android or Windows releases for store review.
Why use it?
It provides the required steps for stores that lack a usable submission API and helps avoid mistakes with uploads, tracks, countries, and review submission.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

This is zhitongblog/solomd's own configuration. It tells Claude Code how to work on solomd itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything solomd configures →

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is ./scripts/submit-for-review.sh --platform ios --version X.Y.Z \.

About the project

SoloMD is a local-first Markdown editor that stores notes as files and provides an interface for AI agents to work with that collection, or vault. It is for people who manage notes and knowledge bases while using agents such as Claude Code, Codex, or Cursor.

zhitongblog/solomd · 1,347 stars · on GitHub · solomd.app

Reuse

Borrowing it

Nothing to install: this file belongs to zhitongblog/solomd. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/zhitongblog/solomd/main/.claude/skills/store-submit/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/zhitongblog/solomd

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for store-submit

README.md
[![agentmods](https://agentmods.dev/badge/skills/zhitongblog/solomd/store-submit/github.svg)](https://agentmods.dev/skills/zhitongblog/solomd/store-submit)
Your own site
<a href="https://agentmods.dev/skills/zhitongblog/solomd/store-submit"><img src="https://agentmods.dev/badge/skills/zhitongblog/solomd/store-submit/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for store-submit

Your own site · 80×15
<a href="https://agentmods.dev/skills/zhitongblog/solomd/store-submit"><img src="https://agentmods.dev/badge/skills/zhitongblog/solomd/store-submit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 139 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,728 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00139 $0.01728
Opus 5.5 $0.00056 $0.00691
Sonnet 5.5 $0.00028 $0.00346
Haiku 4.5 $0.00014 $0.00173

Measured 1mo ago against content hash b3736a2da924, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

store-submit scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 1 executable file (unzoo.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s --noproxy '*' http://127.0.0.1:9399/api/v1/openapi.json
.claude/skills/store-submit/SKILL.md · 165 lines

How it starts

The opening of the file, as written. The whole thing — 165 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Store submission over the Unzoo browser

Google Play and Microsoft Partner Center are the two channels with no usable API for this account, so releasing to them means driving a real browser. This skill is the accumulated way to do that without losing an afternoon.

Apple does not belong here. iOS and macOS submit over the App Store Connect API with no browser at all:

./scripts/submit-for-review.sh --platform ios   --version X.Y.Z \
    --notes-dir app-store/release-notes/X.Y.Z --dry-run

Reach for the browser on Apple only if that script has failed for a reason you have actually diagnosed.

Preflight

S=.claude/skills/store-submit
$S/unzoo.sh status          # {"browser_connected":true,...}
$S/unzoo.sh up              # starts the browser if it is down
$S/unzoo.sh tabs            # find the console tab that is already signed in

If the daemon is down, start it from a Bash call with run_in_background: true — nohup … & is not enough, it dies with the tool's shell:

"/Applications/Unzoo Browser.app/Contents/MacOS/unzoo-service" --daemon

browser_connected: false while the daemon is up means every navigate and evaluate will return HTTP 500; unzoo.sh up opens the browser and waits.

The six rules

These are not style preferences. Each one has already cost a session.

1. Pin the tab. Always. Without tab_id the API acts on whatever tab the user is looking at — their mail, their bank. Resolve one and export it:

export UNZOO_TAB=$($S/unzoo.sh find-tab play.google.com/console)

If a read comes back nonsensical, check unzoo.sh url before you debug the page. It has been the user's Cloudflare dashboard.

2. A coordinate click goes to the ACTIVE tab, not to tab_id. The endpoint accepts the id and ignores it. Clicking a background tab produces no click event, no error, and a page that looks like it ignored you. unzoo.sh click and click-el activate first for this reason — if you call /api/v1/click directly, activate yourself.

Read the full file on GitHub · 165 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +36 lines b3736a2da924
  2. 1mo ago Changed · +9 lines c2252035d601
  3. 1mo ago First seen · 120 lines · 139 tokens per session scan A 8e7614102588

Subscribe to this mod's changes

store-submit is a skill published in the GitHub repository zhitongblog/solomd (1,347 stars, last pushed today), licensed MIT. It adds 139 tokens to every session and 1,728 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.

Related

Other skills, from other repositories

wireframe-mobile-flow

A lo-fi multi-screen MOBILE flow wireframe — three or four phone frames laid out in a row on a board, showing a connected user flow (Onboarding → Home feed → Item detail → Confirm). Grey-box content inside each device, dashed connector arrows + numbered step labels between screens, and a couple of annotation callouts.…

nexu-io/open-design · 141 tokens

argent-device-interact

Interact with an iOS simulator, Android emulator, or Chromium (CDP) app using argent MCP tools. Use when tapping UI elements, performing gestures, scrolling/swiping, typing text, pressing hardware buttons, launching apps, opening URLs, taking screenshots, waiting for an element to appear or disappear, or checking…

software-mansion/argent · 78 tokens

agent-browser

Browser automation via Chrome/Chromium CDP — open, snapshot, click, screenshot. For testing web apps, mobile layouts, and automated interactions without Playwright/Puppeteer.

x-cmd/x-cmd · 39 tokens

preview-screens

Use when the user wants to preview generated screens in a browser without starting Metro / a simulator — for example after /create-mobile-app finishes or after /edit-app regenerates a screen.

microsoft/power-platform-skills · 41 tokens

llmwiki

Build and use a persistent, citation-traceable knowledge wiki from documents, research papers, notes, or project documentation. Use for llmwiki projects, retrieving reusable evidence for an agent task, or compiling a corpus for repeated questions. A one-off file read or live web search does not need a wiki.

atomicstrata/llm-wiki-compiler · 66 tokens

firecrawl-build-interact

Integrate Firecrawl /interact into product code for dynamic pages and browser actions after scraping. Use when a feature needs clicks, form fills, pagination, authentication-aware flows, or other multi-step interactions that plain /scrape cannot complete.

firecrawl/firecrawl · 56 tokens