github-release by jezweb/claude-skills
npx skills add https://github.com/jezweb/claude-skills --skill github-release清理项目并发布到 GitHub。两阶段工作流程:先进行安全检查,然后打标签并发布。
gh CLI (gh auth status)gitleaks 用于扫描密钥 (brew install gitleaks 或从 GitHub 下载)在公开发布前运行这些检查。遇到阻塞项则停止。
gitleaks detect --no-git --source=. --verbose
如果发现密钥:停止。移除密钥,将其移至环境变量。使用 git log -S "secret_value" 检查 git 历史记录——如果存在于历史记录中,请使用 BFG Repo-Cleaner。
如果未安装 gitleaks,请手动检查:
# 检查 .env 文件
find . -name ".env*" -not -path "*/node_modules/*"
# 检查配置文件中的硬编码密钥
grep -ri "api_key\|token\|secret\|password" wrangler.toml wrangler.jsonc .dev.vars 2>/dev/null
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者,精准高效
检查并移除不应发布的会话/规划文件:
SESSION.md — 会话状态planning/, screenshots/ — 工作目录test-*.ts, test-*.js — 本地测试文件删除它们或将其添加到 .gitignore。
ls LICENSE LICENSE.md LICENSE.txt 2>/dev/null
如果缺失:创建一个。检查仓库可见性 (gh repo view --json visibility -q '.visibility')。公共仓库使用 MIT 许可证。对于私有仓库,请考虑使用专有许可证。
检查 README 是否存在并具有基本部分:
grep -i "## Install\|## Usage\|## License" README.md
如果缺少部分,请在发布前添加。
验证是否存在必要的模式:
grep -E "node_modules|\.env|dist/|\.dev\.vars" .gitignore
npm run build 2>&1
npm audit --audit-level=high
如果在清理过程中进行了任何更改:
git add -A
git commit -m "chore: prepare for release"
检查 package.json 中的当前版本,或询问用户。确保版本以 v 前缀开头。
git tag -l "v[version]"
如果存在,询问用户是删除并重新创建还是使用其他版本。
LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
if [ -z "$LAST_TAG" ]; then
git log --oneline --no-merges HEAD | head -20
else
git log --oneline --no-merges ${LAST_TAG}..HEAD
fi
git tag -a v[version] -m "Release v[version]"
git push origin $(git branch --show-current)
git push origin --tags
gh release create v[version] \
--title "Release v[version]" \
--notes "[auto-generated from commits]"
对于预发布版本,添加 --prerelease。对于草稿,添加 --draft。
向用户显示:
每周安装量
393
仓库
GitHub 星标数
643
首次出现
2026年2月18日
安全审计
安装于
opencode353
codex348
github-copilot348
gemini-cli347
cursor341
kimi-cli337
Sanitize and release projects to GitHub. Two-phase workflow: safety checks first, then tag and publish.
gh CLI installed and authenticated (gh auth status)gitleaks installed for secrets scanning (brew install gitleaks or download from GitHub)Run these checks before any public release. Stop on blockers.
gitleaks detect --no-git --source=. --verbose
If secrets found: STOP. Remove secrets, move to environment variables. Check git history with git log -S "secret_value" — if in history, use BFG Repo-Cleaner.
If gitleaks not installed, do manual checks:
# Check for .env files
find . -name ".env*" -not -path "*/node_modules/*"
# Check config files for hardcoded secrets
grep -ri "api_key\|token\|secret\|password" wrangler.toml wrangler.jsonc .dev.vars 2>/dev/null
Check for and remove session/planning files that shouldn't be published:
SESSION.md — session stateplanning/, screenshots/ — working directoriestest-*.ts, test-*.js — local test filesEither delete them or add to .gitignore.
ls LICENSE LICENSE.md LICENSE.txt 2>/dev/null
If missing: create one. Check the repo visibility (gh repo view --json visibility -q '.visibility'). Use MIT for public repos. For private repos, consider a proprietary license instead.
Check README exists and has basic sections:
grep -i "## Install\|## Usage\|## License" README.md
If missing sections, add them before release.
Verify essential patterns are present:
grep -E "node_modules|\.env|dist/|\.dev\.vars" .gitignore
npm run build 2>&1
npm audit --audit-level=high
If any changes were made during sanitization:
git add -A
git commit -m "chore: prepare for release"
Check package.json for current version, or ask the user. Ensure version starts with v prefix.
git tag -l "v[version]"
If it exists, ask user whether to delete and recreate or use a different version.
LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
if [ -z "$LAST_TAG" ]; then
git log --oneline --no-merges HEAD | head -20
else
git log --oneline --no-merges ${LAST_TAG}..HEAD
fi
git tag -a v[version] -m "Release v[version]"
git push origin $(git branch --show-current)
git push origin --tags
gh release create v[version] \
--title "Release v[version]" \
--notes "[auto-generated from commits]"
For pre-releases add --prerelease. For drafts add --draft.
Show the user:
| When | Read |
|---|---|
| Detailed safety checks | references/safety-checklist.md |
| Release mechanics | references/release-workflow.md |
Weekly Installs
393
Repository
GitHub Stars
643
First Seen
Feb 18, 2026
Security Audits
Gen Agent Trust HubPassSocketPassSnykPass
Installed on
opencode353
codex348
github-copilot348
gemini-cli347
cursor341
kimi-cli337
agent-browser 浏览器自动化工具 - Vercel Labs 命令行网页操作与测试
138,300 周安装
Axiom 仪表板构建指南:设计决策优先的监控仪表板与数据可视化
311 周安装
Google Ads Manager 技能:广告系列管理、关键词研究、出价优化与效果分析
311 周安装
Telegram机器人开发教程:构建AI助手、通知系统与群组自动化工具
311 周安装
AI图像生成提示词优化指南:DALL-E、Midjourney、Stable Diffusion提示工程技巧
311 周安装
AI协作头脑风暴工具 - 将想法转化为完整设计规范,支持代码模板与项目管理
311 周安装
解决 Docker 沙盒 npm 安装崩溃:sandbox-npm-install 技能详解与使用指南
311 周安装