ShaheerKhawaja/pos-ship
skills/pos-ship/SKILL.md
Ship composite — PR creation, deployment, canary monitoring, and rollback with release memory. Replaces 4 ship skills.
$ install --global
skillsauthnpx skillsauth add ShaheerKhawaja/ProductionOS pos-shipInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 2:12 AM6.9s2 files scanned
SKILL.md
- name:
- pos-ship
- description:
- Ship composite — PR creation, deployment, canary monitoring, and rollback with release memory. Replaces 4 ship skills.
- argument-hint:
- [pr|deploy|canary|rollback] [branch or target]
pos-ship
Ship composite — PR creation, deployment, canary monitoring, and rollback with release memory. Replaces 4 ship skills.
Replaces: ship, ship-safe, land-and-deploy, setup-deploy
Actions
| Action | What |
|--------|------|
| pr [branch] | Self-eval -> review -> create PR with test plan |
| deploy [target] | Push to production with pre-flight checks |
| canary | Monitor deployment for errors, performance regression |
| rollback | Revert last deployment with verification |
Routing
- Parse action from first argument
- Load domain memory from
~/.productionos/domains/pos-ship/ - If first run: auto-detect project context, create profile
- Dispatch to
sub-skills/{action}.md - Score against
evaluation/rubric.yml, update memory
Domain Memory
Stored at ~/.productionos/domains/pos-ship/:
release-log.jsonl (past releases with outcomes), deploy-config.yml (targets, environments), incident-log.jsonl (past deployment issues), learnings.jsonl
Inputs
| Parameter | Values | Default | Description |
|-----------|--------|---------|-------------|
| action | pr, deploy, canary, rollback | pr | Sub-skill to run |
| target | path, URL, or description | required | What to operate on |
Guardrails
- Memory is append-only. Never delete history.
- Every action scored against rubric. No silent completion.
- Profile is user-controlled. Never change without asking.
- Evidence required. No fabricated metrics.
- Learn from history. Compare to past executions.
Related Skills
ShaheerKhawaja/writing-plans
tools
VerifiedTrustedCommunity
Implementation planning workflow that turns approved ideas into dependency-aware execution plans.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/wiki-rag
development
VerifiedTrustedCommunity
Local RAG and Graph RAG over the SecondBrain wiki vault. Progressive context loading (hot cache -> index -> domain -> entity). Graph traversal via wikilink resolution. Use when agents need cross-project context, when answering questions that span multiple domains, or when building context for planning tasks. Triggers on: "wiki context", "cross-project context", "what do we know about", "check the wiki", "graph context", "/wiki-rag".
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/ux-genie
devops
VerifiedTrustedCommunity
UX improvement pipeline — creates user stories from UI guidelines, maps user journeys, identifies friction, dispatches fix agents. The user-experience equivalent of /production-upgrade.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/tdd
development
VerifiedTrustedCommunity
Test-driven development workflow that writes failing tests first, implements minimally, and refactors safely.
7SKILL.mdUpdated Apr 23, 2026