autoship SKILL.md skillA
autoship from mblode/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add mblode/agent-skills/autoship@git:20261022.dc3f816Pins git:20261022.dc3f816 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- mblode/agent-skills
- Path
skills/autoship/SKILL.md- Versions recorded
- 7
- Latest version
- git:20261022.dc3f816, committed Oct 22, 2026
- First version recorded
- Jun 10, 2026
- Size
- 11,981 bytes
- Repository stars
- 180
- License
- MIT
Runs a changesets npm release through the version PR, CI publish, and registry verification. Use when asked to "release this package", "autoship", "merge Version Packages", or diagnose a release that did not publish.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Autoship Drive an npm release end to end: changeset, fix loop, push, CI watch, Version Packages PR merge, publish watch, npm verification. - **IS:** the full release pipeline for an existing changesets-based npm package, from writing the changeset file to confirming the new version on the registry, plus diagnosing why a release run did not version or publish. - **IS NOT:** opening a feature PR (use `pr-creator`), monitoring a feature PR for reviews, conflicts, or CI (use `pr-babysitter`), general build or type fixes outside a release flow, or scaffolding a new package (use `scaffold-cli`, which hands off to autoship for the first release). ## The Release Loop One workflow, two successive runs. Misreading it as two workflows causes most autoship mistakes. 1. Push a commit containing a pending `.changeset/*.md` file to the default branch. 2. The release workflow runs: `changesets/action` sees pending changesets, runs `changeset version` in CI, and opens or updates a PR on branch `changeset-release/<default-branch>` (title "Version Packages", suffixed "(next)" in pre mode) carrying the `package.json` bump and `CHANGELOG.md` entry. 3. Merge that PR once every check is green. …
Read the whole file at its exact version.
How to install
mdr add mblode/agent-skills/autoship@sha256:e13be7bed1353424The line at the top of this page pins the label git:20261022.dc3f816, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_wodgrxh6cnvhgk6h)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 7 versions of this file, between Jun 10, 2026 and Oct 22, 2026, about one every 22 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261022.dc3f816 latest | 2026-10-22 | dc3f816 | 11,981 B | A | view · diff |
| git:20261003.4a29604 | 2026-10-03 | 4a29604 | 11,911 B | A | view · diff |
| git:20260904.359fa94 | 2026-09-04 | 359fa94 | 12,864 B | A | view · diff |
| git:20260901.a877ac0 | 2026-09-01 | a877ac0 | 13,075 B | A | view · diff |
| git:20260725.d218524 | 2026-07-25 | d218524 | 10,759 B | A | view · diff |
| git:20260629.22a380e | 2026-06-29 | 22a380e | 10,774 B | A | view · diff |
| git:20260610.a746da9 | 2026-06-10 | a746da9 | 11,594 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11981 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
mblode/agent-skills · 180 stars · license MIT · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_wodgrxh6cnvhgk6h GET https://markdownregistry.com/api/v1/resolve?ref=mblode/agent-skills/autoship GET https://markdownregistry.com/api/v1/blob/e13be7bed13534243d295bee5a9bf5efcea89c44b78e24490bb042c5a8a2eb3d
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from mblode/agent-skills
Every file in mblode/agent-skills