Agent Skills › ruvnet/open-claude-code › occ-verify-release

occ-verify-release

GitHub

验证 Open Claude Code 发布包的完整性、测试状态及自动化证据。通过校验版本、SHA512 摘要、运行 E2E 测试及审查 CI/CD 流水线结论，确认发布是否真实完成且具备可追溯性，防止虚假发布。

skills/occ-verify-release/SKILL.md ruvnet/open-claude-code

Trigger Scenarios

询问 OCC 发布是否已发布检查发布包是否经过测试验证自动化流程证据

Install

npx skills add ruvnet/open-claude-code --skill occ-verify-release -g -y

More Options

Use without installing

npx skills use ruvnet/open-claude-code@occ-verify-release

指定 Agent (Claude Code)

npx skills add ruvnet/open-claude-code --skill occ-verify-release -a claude-code -g -y

安装 repo 全部 skill

npx skills add ruvnet/open-claude-code --all -g -y

预览 repo 内 skill

npx skills add ruvnet/open-claude-code --list

SKILL.md

Frontmatter

{
    "name": "occ-verify-release",
    "description": "Verify Open Claude Code package integrity, release tests, and automation evidence. Use when asked whether an OCC release is published, tested, or fully automated."
}

Verify an Open Claude Code release

Resolve the exact package version and source commit. Check npm metadata for @ruvnet/open-claude-code and its intended distribution tag.
Download the exact tarball and compare its SHA512 integrity with npm metadata and the release receipt. Metadata visibility alone does not prove fresh installation works.
In a disposable directory and home, install with lifecycle scripts disabled. Run version/help and the repository's scripts/package-e2e.mjs against that exact tarball or registry version.
If live provider testing is authorized, run scripts/live-package-e2e.mjs with an existing protected AI_API_KEY binding. Never put a credential in a command argument or evidence file. A mock test is not a live provider test.
Inspect the GitHub Actions conclusion and every required gate. Queued, skipped, or failed runs do not prove unattended publication. Check that checkpoints advance only after registry installation and release verification.
Report source commit, version, test results, registry integrity, and outstanding gaps separately. Capability proposals are not implemented capabilities.
This skill verifies evidence. Publish, merge, change tags, or modify secrets only when the user has authorized those actions.