shipping-and-launch

An agent skill by addyosmani, from addyosmani/agent-skills. Tags: developer-tools, documents, web.

What it does

Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add addyosmani/agent-skills --skill shipping-and-launch

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/addyosmani/agent-skills
cp -r agent-skills/skills/shipping-and-launch ~/.claude/skills/shipping-and-launch

Safety box score

Grade A, minimal risk: 7 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This is a launch checklist and rollout playbook, not an executable tool. Its main risks are operational: it normalizes production deploys, staged rollouts, rollback commands, and telemetry collection that can send request/user data to observability services.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	0 (none)	No scripts or runtime code are shipped; the only command text is illustrative documentation like `git revert <commit> && git push`.
Network access	1 (low)	It recommends error reporting and monitoring, and the examples send `userId`, `page`, `req.url`, and similar data to reporting services.
Filesystem reach	0 (none)	It does not read, write, or delete files outside the project; it only discusses deployment and documentation checks.
Secrets & credentials	0 (none)	It tells you to verify that secrets are absent, but it does not request or access tokens, keys, `.env` files, or browser sessions.
Privilege & persistence	0 (none)	There is no sudo, global install, service registration, or shell/OS settings change in the skill.
Instruction hijack surface	0 (none)	No hidden instructions, prompt hijacking, or directives to ignore safeguards appear in the file.
Irreversible actions	1 (low)	The skill is about production shipping, canary rollout, and rollback; it even includes a `git push` rollback example, but it is still a checklist rather than an executor.
Transparency	0 (none)	All provided content is plain markdown; there are no binaries, downloads, or decoded-at-runtime blobs.

Before installing

Decide whether you want the agent to only plan launches or also carry out deploy/rollback steps like `git push`.
Identify which monitoring/error-reporting service will receive user IDs, URLs, and stack traces.
Read the referenced rollout and security docs before using this on a real production system.

Rated 2026-10-20 by an automated review of 1 file from the skill's repository.

Source

Repository: addyosmani/agent-skills (all skills from this repository)
Path: skills/shipping-and-launch/SKILL.md
Branch: main
Updated: 2026-09-19

source-driven-development — Grounds every implementation decision in official documentation.
archify — Create polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone HTML with inline SVG.
code-documenter — Generates, formats, and validates technical documentation — including docstrings, OpenAPI/Swagger specs, JSDoc annotations, doc portals, and user guides.
defuddle — Extract clean Markdown from HTML pages with Defuddle CLI.
seo-sitemap — Analyze existing XML sitemaps or generate new ones with industry templates. Validates format, URLs, and structure.
site-md — Analyze a project description or site requirements and synthesize a project constitution into SITE.md for the Stitch Build Loop