ShaheerKhawaja/productionos-ship
codex-skills/productionos-ship/SKILL.md
Ship workflow — detect base branch, merge, run tests, review diff, bump VERSION, update CHANGELOG, commit, push, create PR.
$ install --global
skillsauthnpx skillsauth add ShaheerKhawaja/ProductionOS productionos-shipInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 2:11 AM10.9s1 file scanned
SKILL.md
- name:
- productionos-ship
- description:
- Ship workflow — detect base branch, merge, run tests, review diff, bump VERSION, update CHANGELOG, commit, push, create PR.
- argument-hint:
- [version bump, repo path, or branch context]
productionos-ship
Use this alias when you want the same workflow through a top-level Codex-safe name without the productionos: namespace.
Overview
Use this as the Codex-first shipping workflow. It should prepare the current branch for review and release by synchronizing with base, validating the code, reviewing the diff, updating release metadata, and then pushing and opening a PR.
Source references:
.claude/commands/ship.md.claude/commands/review.md
Inputs
- optional
version_bump:patch,minor,major, orauto - current branch and base branch context
Codex Workflow
- Resolve the base branch.
- Sync with base safely.
- fetch
- merge or rebase only if the workflow allows it
- stop on conflicts
- Run the validation gate.
- tests
- type checks
- any repo-specific release checks
- Review the diff.
- no critical issues
- no release blockers
- Update release metadata.
VERSIONCHANGELOG- other manifest versions when needed
- Commit, push, and open or update the PR.
Expected Output
- branch readiness summary
- version decision
- release metadata updates
- push and PR status
Guardrails
- never push directly to
main - never ship with failing tests
- never ignore critical review findings
- if GitHub auth or network is unavailable, report the blocker clearly instead of pretending the PR was created
Related Skills
ShaheerKhawaja/writing-plans
tools
VerifiedTrustedCommunity
Implementation planning workflow that turns approved ideas into dependency-aware execution plans.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/wiki-rag
development
VerifiedTrustedCommunity
Local RAG and Graph RAG over the SecondBrain wiki vault. Progressive context loading (hot cache -> index -> domain -> entity). Graph traversal via wikilink resolution. Use when agents need cross-project context, when answering questions that span multiple domains, or when building context for planning tasks. Triggers on: "wiki context", "cross-project context", "what do we know about", "check the wiki", "graph context", "/wiki-rag".
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/ux-genie
devops
VerifiedTrustedCommunity
UX improvement pipeline — creates user stories from UI guidelines, maps user journeys, identifies friction, dispatches fix agents. The user-experience equivalent of /production-upgrade.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/tdd
development
VerifiedTrustedCommunity
Test-driven development workflow that writes failing tests first, implements minimally, and refactors safely.
7SKILL.mdUpdated Apr 23, 2026