ship
Automates the shipping workflow by merging branches, running tests, and creating pull requests, enhancing deployment efficiency.
Install this skill
Security score
The ship skill was audited on Jun 5, 2026 and we found 26 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 1039 | 1. Read the `/document-release` skill: `cat ${CLAUDE_SKILL_DIR}/../document-release/SKILL.md` |
Access to hidden dotfiles in home directory
| 23 | _UPD=$(~/.claude/skills/chief/bin/chief-update-check 2>/dev/null || .claude/skills/chief/bin/chief-update-check 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 25 | mkdir -p ~/.chief/sessions |
Access to hidden dotfiles in home directory
| 26 | touch ~/.chief/sessions/"$PPID" |
Access to hidden dotfiles in home directory
| 27 | _SESSIONS=$(find ~/.chief/sessions -mmin -120 -type f 2>/dev/null | wc -l | tr -d ' ') |
Access to hidden dotfiles in home directory
| 28 | find ~/.chief/sessions -mmin +120 -type f -delete 2>/dev/null || true |
Access to hidden dotfiles in home directory
| 29 | _CONTRIB=$(~/.claude/skills/chief/bin/chief-config get chief_contributor 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 30 | _PROACTIVE=$(~/.claude/skills/chief/bin/chief-config get proactive 2>/dev/null || echo "true") |
Access to hidden dotfiles in home directory
| 34 | _LAKE_SEEN=$([ -f ~/.chief/.completeness-intro-seen ] && echo "yes" || echo "no") |
Access to hidden dotfiles in home directory
| 36 | mkdir -p ~/.chief/analytics |
Access to hidden dotfiles in home directory
| 37 | echo '{"skill":"ship","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}' >> ~/.chief/analytics/skill-usage.j |
Access to hidden dotfiles in home directory
| 43 | If output shows `UPGRADE_AVAILABLE <old> <new>`: read `~/.claude/skills/chief/chief-upgrade/SKILL.md` and follow the "Inline upgrade flow" (auto-upgrade if configured, otherwise AskUserQuestion with 4 |
Access to hidden dotfiles in home directory
| 52 | touch ~/.chief/.completeness-intro-seen |
Access to hidden dotfiles in home directory
| 104 | **To file:** write `~/.chief/contributor-logs/{slug}.md` with **all sections below** (do not truncate — include every section through the Date/Version footer): |
Access to hidden dotfiles in home directory
| 216 | ~/.claude/skills/chief/bin/chief-review-read |
Access to hidden dotfiles in home directory
| 258 | source <(~/.claude/skills/chief/bin/chief-slug 2>/dev/null) |
Access to hidden dotfiles in home directory
| 259 | grep '"skill":"ship-review-override"' ~/.chief/projects/$SLUG/$BRANCH-reviews.jsonl 2>/dev/null || echo "NO_OVERRIDE" |
Access to hidden dotfiles in home directory
| 268 | - For Design Review: run `source <(~/.claude/skills/chief/bin/chief-diff-scope <base> 2>/dev/null)`. If `SCOPE_FRONTEND=true` and no design review (plan-design-review or design-review-lite) exists in |
Access to hidden dotfiles in home directory
| 272 | source <(~/.claude/skills/chief/bin/chief-slug 2>/dev/null) |
Access to hidden dotfiles in home directory
| 273 | echo '{"skill":"ship-review-override","timestamp":"'"$(date -u +%Y-%m-%dT%H:%M:%SZ)"'","decision":"USER_CHOICE"}' >> ~/.chief/projects/$SLUG/$BRANCH-reviews.jsonl |
Access to hidden dotfiles in home directory
| 689 | source <(~/.claude/skills/chief/bin/chief-diff-scope <base> 2>/dev/null) |
Access to hidden dotfiles in home directory
| 712 | ~/.claude/skills/chief/bin/chief-review-log '{"skill":"design-review-lite","timestamp":"TIMESTAMP","status":"STATUS","findings":N,"auto_fixed":M,"commit":"COMMIT"}' |
Access to hidden dotfiles in home directory
| 807 | ~/.claude/skills/chief/bin/chief-review-log '{"skill":"codex-review","timestamp":"TIMESTAMP","status":"STATUS","gate":"GATE"}' |
External URL reference
| 47 | thing when AI makes the marginal cost near-zero. Read more: https://garryslist.org/posts/boil-the-ocean" |
External URL reference
| 51 | open https://garryslist.org/posts/boil-the-ocean |
External URL reference
| 1024 | 🤖 Generated with [Claude Code](https://claude.com/claude-code) |