shipping-artifacts

An agent skill by phuryn, from phuryn/pm-skills. Tags: api, automation, developer-tools, documents.

What it does

The durable documentation set that makes an AI-built (vibe-coded) app reviewable before shipping. A small core every app needs — architecture, user/permission flows, permissions, variables/secrets, and a test-coverage map — plus conditional docs added only when they apply: emails, scheduled work, SEO, and embedded agents/automation. Defines what each doc must capture and how a reviewer or auditor uses it. Use when documenting a codebase for handoff, mapping user journeys and trust-boundary crossings, planning test coverage, or preparing for a security or performance audit.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add phuryn/pm-skills --skill shipping-artifacts

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/phuryn/pm-skills
cp -r pm-skills/pm-ai-shipping/skills/shipping-artifacts ~/.claude/skills/shipping-artifacts

Safety box score

Grade A, minimal risk: 4 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This is a documentation-generation skill for AI-built apps: it reads repo conventions and writes review artifacts like `architecture.md`, `flows.md`, `permissions.md`, `variables.md`, and `tests.md` into the project’s docs/report locations. It does not ship code or run commands itself, so the main risk is limited to file creation and overwriting/merging documentation inside the repository.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	0 (none)	No shell commands, script execution, or code evaluation is present in `SKILL.md`; it only describes docs to produce.
Network access	0 (none)	The skill does not fetch remote content or send data to external hosts; it only references local repo files and docs locations.
Filesystem reach	1 (low)	It writes and updates markdown files in the repo, e.g. “Write into the repo's docs location, update its existing equivalent instead of creating a parallel file” and defaults like `documentation/tests.md` and `reports/<name>_{timestamp}.md`.
Secrets & credentials	0 (none)	It documents secrets and variables, but does not ask to read, export, or paste credentials or touch secret stores.
Privilege & persistence	0 (none)	No sudo, service registration, shell startup edits, or system-level configuration changes are required.
Instruction hijack surface	0 (none)	The text gives documentation rules and repo-setup precedence, but it does not tell the agent to ignore safeguards, hide behavior, or follow untrusted remote instructions.
Irreversible actions	0 (none)	It is a reviewability/documentation skill, not one that deploys, posts, pays, books, or deletes resources.
Transparency	0 (none)	The skill is plain markdown with no binaries, minified blobs, or decoded-at-runtime code.

Before installing

Check whether your repo already has `architecture.md`, `flows.md`, `permissions.md`, `variables.md`, or `tests.md` equivalents so the skill updates the intended files.
Confirm the docs/report directory convention you want the agent to follow; the skill will use repo setup first, then defaults like `documentation/` and `reports/`.
If you care about preserving existing wording, review the current docs before running the skill, since it is designed to rewrite or merge into them.

Rated 2026-10-20 by an automated review of 1 file from the skill's repository.

Source

Repository: phuryn/pm-skills (all skills from this repository)
Path: pm-ai-shipping/skills/shipping-artifacts/SKILL.md
Branch: main
Updated: 2026-09-19

intended-vs-implemented — The method for finding the gap between what a system is supposed to do and what the code actually does — the class of bug generic scanners miss because they.
atlassian-mcp — Integrates with Atlassian products to manage project tracking and documentation via MCP protocol.
bdi-mental-states — This skill should be used when modeling agent mental states with BDI concepts: beliefs, desires, intentions, RDF-to-belief transformations.
book-to-skill — Converts books and documents (PDF, EPUB, DOCX, HTML, Markdown, plain text, RTF, MOBI/AZW with Calibre) into structured agent skills, extracting frameworks.
changelog-video — Turn a weekly changelog .md into a finished branded changelog video (square 1080, ~45-60s, Annie VO, animated brand background, mock-UI visualizations.
code-documenter — Generates, formats, and validates technical documentation — including docstrings, OpenAPI/Swagger specs, JSDoc annotations, doc portals, and user guides.