Agent Skills › ruvnet/open-claude-code › occ-verify-release

occ-verify-release

GitHub

验证 Open Claude Code 发布的完整性与测试状态，通过校验 npm 元数据、SHA512 签名及执行 E2E 测试来确认发布是否经过充分自动化测试并符合安全规范。

skills/occ-verify-release/SKILL.md ruvnet/open-claude-code

Trigger Scenarios

询问 OCC 发布是否已测试或完全自动化需要验证软件包完整性和发布证据

Install

npx skills add ruvnet/open-claude-code --skill occ-verify-release -g -y

More Options

Use without installing

npx skills use ruvnet/open-claude-code@occ-verify-release

指定 Agent (Claude Code)

npx skills add ruvnet/open-claude-code --skill occ-verify-release -a claude-code -g -y

安装 repo 全部 skill

npx skills add ruvnet/open-claude-code --all -g -y

预览 repo 内 skill

npx skills add ruvnet/open-claude-code --list

SKILL.md

Frontmatter

{
    "name": "occ-verify-release",
    "description": "Verify Open Claude Code package integrity, release tests, and automation evidence. Use when asked whether an OCC release is published, tested, or fully automated."
}

Verify an Open Claude Code release

Resolve the exact package version and source commit. Check npm metadata for @ruvnet/open-claude-code and its intended distribution tag.
Download the exact tarball and compare its SHA512 integrity with npm metadata and the release receipt. Metadata visibility alone does not prove fresh installation works.
In a disposable directory and home, install with lifecycle scripts disabled. Run version/help and the repository's scripts/package-e2e.mjs against that exact tarball or registry version.
If live provider testing is authorized, run scripts/live-package-e2e.mjs with an existing protected AI_API_KEY binding. Never put a credential in a command argument or evidence file. A mock test is not a live provider test.
Inspect the GitHub Actions conclusion and every required gate. Queued, skipped, or failed runs do not prove unattended publication. Check that checkpoints advance only after registry installation and release verification.
Report source commit, version, test results, registry integrity, and outstanding gaps separately. Capability proposals are not implemented capabilities.
This skill verifies evidence. Publish, merge, change tags, or modify secrets only when the user has authorized those actions.