Our review
Executes comprehensive release workflows with SDLC validation for multiple project types.
Strengths
- Automatic project type detection (Claude plugin, Python, Node.js, Go, Rust)
- Thorough validation including tests, coverage, linting, and security
- Version bumping via appropriate tools (bump-my-version, npm version, cargo-bump)
- Advanced options like dry-run, PR creation, and force mode
Limitations
- Requires specific validation tools installed in the environment
- Coverage thresholds are configurable but default to a high 95%
- Does not handle projects with custom build tools
Best used to automate releases of Claude Code plugins or standard projects (Python, Node, Go, Rust) with pre-release validation.
Avoid for highly customized projects or those needing non-standard release steps not covered by the validators.
Security analysis
CautionThe skill invokes Bash to run standard development tools and a bundled Python validator script; while no destructive or exfiltrating commands are present, executing arbitrary code from a script carries inherent risk if the skill's source is compromised. Users should ensure the integrity of the referenced scripts.
No concerns found
Examples
/agents:release patch/agents:release minor --dry-run/agents:release major --prname: release description: This skill should be used when the user asks to "release a project", "create a release", "bump version", "publish to GitHub", "prepare a release", "run release validation", or needs to perform SDLC-compliant releases for Claude Code plugins, Python, Node.js, Go, or Rust projects. Provides comprehensive pre-release validation including tests, lint, coverage, and security checks. allowed-tools: Bash(*), Read, Write, Glob, Grep, AskUserQuestion
Universal Release Skill
This skill executes comprehensive release workflows with SDLC validation for multiple project types. It prevents broken, untested, or insecure code from being released.
Supported Project Types
| Type | Detection | Version Tool | Validators |
|------|-----------|--------------|------------|
| Claude Plugin | .claude-plugin/plugin.json | bump-my-version | plugin.json, agents, skills, commands |
| Python | pyproject.toml, setup.py | bump-my-version | pytest, ruff, mypy, bandit, pip-audit |
| Node.js | package.json | npm version | npm test, eslint, npm audit |
| Go | go.mod | manual | go test, golangci-lint, go vet |
| Rust | Cargo.toml | cargo-bump | cargo test, clippy, cargo audit, cargo fmt |
Quick Reference
# Interactive release (prompts for type)
/agents:release
# Specific release types
/agents:release patch # Bug fixes (0.7.1 → 0.7.2)
/agents:release minor # New features (0.7.1 → 0.8.0)
/agents:release major # Breaking changes (0.7.1 → 1.0.0)
# Options
/agents:release --dry-run # Preview without changes
/agents:release --pr # Create PR instead of push
/agents:release --force # Continue despite warnings
/agents:release --coverage=80 # Override coverage threshold
Release Workflow
Execute these phases in order:
Phase 1: Project Detection
Detect project type using cascade detection:
if [ -f ".claude-plugin/plugin.json" ] || [ -f "plugin.json" ]; then
PROJECT_TYPE="claude-plugin"
elif [ -f "pyproject.toml" ] || [ -f "setup.py" ]; then
PROJECT_TYPE="python"
elif [ -f "package.json" ]; then
PROJECT_TYPE="nodejs"
elif [ -f "go.mod" ]; then
PROJECT_TYPE="go"
elif [ -f "Cargo.toml" ]; then
PROJECT_TYPE="rust"
else
PROJECT_TYPE="generic"
fi
Phase 2: Git Status Check
Verify repository state:
echo "Branch: $(git branch --show-current)"
git status --porcelain
git log --oneline @{u}..HEAD 2>/dev/null || git log --oneline -5
Phase 3: SDLC Validation
CRITICAL: Run comprehensive validation before any release.
Use the release validator script:
VALIDATOR="${SKILL_DIR}/scripts/release_validator.py"
python3 "$VALIDATOR" . --coverage-threshold=${COVERAGE:-95} --verbose
The validator checks:
- Tests: Run test suite, verify passing
- Coverage: Enforce 95% minimum (configurable)
- Lint: Check code style and formatting
- Security: Scan for vulnerabilities
- CHANGELOG: Verify [Unreleased] section exists
- Breaking changes: Detect deleted/renamed files
- CI config: Verify workflows exist
If validation fails without --force, prompt:
AskUserQuestion:
- question: "Validation found issues. How to proceed?"
- options:
- "Fix issues first (Recommended)"
- "Continue anyway"
- "Abort release"
Phase 4: Uncommitted Changes
If uncommitted changes exist:
- Show changes:
git diff --stat - Prompt for action: commit all, commit staged, skip, or abort
- Generate conventional commit message based on project type:
- Claude plugins:
feat(agents):,feat(skills):,fix(commands): - General:
feat:,fix:,refactor:,docs:
- Claude plugins:
Never commit sensitive files: .env*, *.key, *.pem, *credentials*
Phase 5: Version Bump
Execute version bump using appropriate tool:
| Project | Tool | Command |
|---------|------|---------|
| Claude Plugin | bump-my-version | bump-my-version bump $TYPE |
| Python | bump-my-version | bump-my-version bump $TYPE |
| Node.js | npm | npm version $TYPE |
| Go | manual | Edit go.mod |
| Rust | cargo-bump | cargo bump $TYPE |
For --dry-run, show preview without executing.
Phase 6: Push Release
Default (no --pr):
git push --follow-tags
With --pr flag:
BRANCH="release/$(date +%Y%m%d)-v${NEW_VERSION}"
git checkout -b "$BRANCH"
git push -u origin "$BRANCH"
gh pr create --title "chore(release): v${NEW_VERSION}" --body "..."
Phase 7: Summary
Display release summary:
- Project type and path
- Version change (old → new)
- Validation results
- Git status (branch, tags, remote)
Semver Recommendation Logic
The validator recommends version type based on changes:
| Detected | Recommendation |
|----------|---------------|
| Breaking changes (deleted/renamed files) | major |
| New features, significant additions | minor |
| Bug fixes, docs, maintenance | patch |
Breaking change detection analyzes git diff since last tag for:
- Deleted files (excluding tests, dotfiles)
- Renamed files (public API changes)
Coverage Threshold
Default: 95% coverage required.
Override methods:
- Command flag:
--coverage=80 - Project config (pyproject.toml, package.json)
- Environment:
COVERAGE_THRESHOLD=80
Error Handling
Validation Failure
- Display specific failing checks
- Show remediation steps
- Offer
--forceto continue or abort
Push Failure
- Fetch and check for conflicts
- Attempt rebase:
git pull --rebase - Retry push
- Fallback: offer PR creation
Version Bump Failure
- Check for uncommitted version files
- Verify .bumpversion.toml exists
- Offer manual version instructions
Safety Rules
- Never force push
- Never skip validation without explicit confirmation
- Always run full validation before release
- Preserve all git history
- Require coverage threshold by default
- Warn on breaking changes
Additional Resources
Scripts
scripts/release_validator.py- Comprehensive SDLC validation script
References
references/sdlc-requirements.md- Detailed validation requirements per project typereferences/version-management.md- Version bump tool configurations
Examples
examples/plugin-release.md- Example Claude plugin release outputexamples/python-release.md- Example Python package release output
Docker Compose Architect
DevOps
Designs optimized Docker Compose configurations.
Incident Postmortem Writer
DevOps
Writes structured and blameless incident postmortem reports.
Runbook Creator
DevOps
Creates clear operational runbooks for common DevOps procedures.