the-agency-ai/src/claude/skills/release
src/claude/skills/release/SKILL.md
Quality-check, commit, push, create PR, and cut a release in one flow.
$ install --global
skillsauthnpx skillsauth add the-agency-ai/the-agency src/claude/skills/releaseInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 11:31 AM134.8s1 file scanned
SKILL.md
- description:
- Quality-check, commit, push, create PR, and cut a release in one flow.
<!--
Flag #62/#63: allowed-tools removed. Inherits Bash(*) from
.claude/settings.json. Restricting to specific subcommand patterns at the
skill level silently blocks agents on permission prompts the agent cannot
see — see dispatch #171 for the devex incident that surfaced this trap.
-->
Release
Quality-check, commit, push, create PR, and cut a release in one flow. The "code is ready" command. Every PR is a release.
Arguments
- $ARGUMENTS: May contain
--no-push(skip push) or--no-pr(skip PR creation). Remaining text is the commit description.
Steps
Step 1: Pre-flight
- Get current branch. If on master, abort.
- Show
git statusandgit diff --stat HEAD. - If no changes, tell the user and stop.
Step 2: Quality gate
Run ./agency/tools/commit-precheck to verify formatting, linting, and tests pass.
If any check fails, stop and report the failures. Do not proceed.
Step 3: Commit
Invoke /git-safe-commit via the Skill tool. Pass any commit description from $ARGUMENTS.
Step 4: Push (unless --no-push)
If --no-push was NOT passed:
- Show what will be pushed:
git log --oneline origin/{branch}..HEAD - Ask for confirmation
./agency/tools/git-push --force-with-lease {branch}
Step 5: PR (unless --no-pr)
If --no-pr was NOT passed and a push happened:
- Check if a PR already exists:
gh pr view {branch} - If exists: report the PR URL
- If not: create one with
./agency/tools/pr-create --title "..." --body "..."
Never raw gh pr create. The pr-create tool validates a QGR receipt exists before allowing PR creation. If no QGR is found, it blocks — run /pr-prep first.
Step 6: Version bump
- Parse the PR title for the release version (D#-R# → version #.#)
- Update
agency/config/manifest.json: bumpagency_version, updateupdated_at - Commit the version bump
- Push the version bump:
./agency/tools/git-push {branch}
Step 7: Summary
Release complete:
Committed: {commit-hash} {message}
Version: {old} → {new}
Pushed: origin/{branch}
PR: {url} (or skipped)
Post-merge: run /post-merge after PR is merged to create GitHub release
Related Skills
the-agency-ai/src/claude/skills/worktree-sync
business
VerifiedTrustedCommunity
Sync worktree with master — merge, copy settings, run sandbox-sync, report changes
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-list
tools
VerifiedTrustedCommunity
List all git worktrees with status info (branch, clean/dirty, deps)
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-delete
tools
VerifiedTrustedCommunity
Remove a git worktree and optionally delete its branch
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-create
development
VerifiedTrustedCommunity
Create a new git worktree with dedicated branch and bootstrapped dev environment
5SKILL.mdUpdated Apr 22, 2026