GitHub Release

What it does

When your agent uses it

• Prepare for release
• Tasks that involve Technical documentation

Example prompts

• “release”
• “publish”
• “open source”
• “/github-release”

Requirements

• Compatibility (from SKILL.md): claude-code-only

Workflow steps

2 steps, taken from the step headings in SKILL.md.

1. 1Sanitize
2. 2Release

What it can do on your machine

Read from SKILL.md and the folder at commit 64965d9. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Shell commands in SKILL.md call:

  • git
  • gh
  • npm
  • gitleaks
  • brew

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md. Its commands use git, gh and npm, which can reach the network depending on how they are called.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

• Compatibility

  claude-code-only

  From compatibility in the SKILL.md frontmatter.

Context cost

GitHub Release loads about 944 tokens when it runs, and up to ~1.8k if it reads all its reference files. Until then it costs about 77 tokens; SKILL.md has 290 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~77

When it runs · the whole SKILL.md, loaded when a task matches

~944

With references · SKILL.md plus every file in references/, read only if the agent opens them

~1.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• NoteMentions a .env fileSKILL.md:34

  # Check for .env files

• NoteMentions a .env fileSKILL.md:35

  find . -name ".env*" -not -path "*/node_modules/*"

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jezweb/claude-skills at commit 64965d9, republished under its MIT licence (© jezweb). 290 words, ~944 tokens.

name

github-release

description

Prepare and publish GitHub releases. Sanitizes code for public release (secrets scan, personal artifacts, LICENSE/README validation), creates version tags, and publishes via gh CLI. Trigger with 'release', 'publish', 'open source', 'prepare for release', 'create release', or 'github release'.

compatibility

claude-code-only

gitleaks detect --no-git --source=. --verbose

# Check for .env files
find . -name ".env*" -not -path "*/node_modules/*"

# Check config files for hardcoded secrets
grep -ri "api_key\|token\|secret\|password" wrangler.toml wrangler.jsonc .dev.vars 2>/dev/null

ls LICENSE LICENSE.md LICENSE.txt 2>/dev/null

grep -i "## Install\|## Usage\|## License" README.md

grep -E "node_modules|\.env|dist/|\.dev\.vars" .gitignore

npm run build 2>&1

npm audit --audit-level=high

git add -A
git commit -m "chore: prepare for release"

git tag -l "v[version]"

LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
if [ -z "$LAST_TAG" ]; then
  git log --oneline --no-merges HEAD | head -20
else
  git log --oneline --no-merges ${LAST_TAG}..HEAD
fi

git tag -a v[version] -m "Release v[version]"
git push origin $(git branch --show-current)
git push origin --tags

gh release create v[version] \
  --title "Release v[version]" \
  --notes "[auto-generated from commits]"

© jezweb, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 2 other files (references) in plugins/dev-tools/skills/github-release of jezweb/claude-skills.

• SKILL.md
• references/release-workflow.md
• references/safety-checklist.md

Open the folder on GitHubat commit 64965d9