> Orchestrate end-to-end release pipelines. Use when running pre-release validation, generating changelogs, bumping semantic versions, scoring deployment readiness, or gating releases with secret scanning and GO/NO-GO checks.
npx skills add https://github.com/borghei/Claude-Skills --skill release-orchestrator
The agent runs pre-flight validation, generates changelogs from conventional commits, auto-bumps semantic versions, and scores deployment readiness with a GO/CONDITIONAL/NO-GO decision.
package.json, pyproject.toml, Cargo.toml, etc.; pre-release tags (--pre alpha|beta|rc).@author attribution.Before orchestrating the release, confirm these inputs. If any is unknown or vague, ASK — do not assume:
--from/--to)Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.
| Tool | Purpose | Command |
|------|---------|---------|
| preflight_checker.py | Run 7 pre-release checks (sync, conflicts, secrets, commits, deps) | python scripts/preflight_checker.py --repo . --base main --json |
| changelog_generator.py | Generate Keep a Changelog markdown from a ref range | python scripts/changelog_generator.py --repo . --from v1.2.0 --to HEAD --output CHANGELOG.md |
| version_bumper.py | Auto-detect next semver from commits; write version files | python scripts/version_bumper.py --repo . --dry-run --json |
| release_readiness_scorer.py | Score readiness 0-100 with GO/CONDITIONAL/NO-GO decision | python scripts/release_readiness_scorer.py --input release_data.json --json |
All tools support --json for machine output. Exit code 0 = pass, 1 = fail (CI-friendly).
Load the reference that matches the task — keep this file lean and pull detail on demand:
This skill covers: pre-flight validation, semantic version bumping, changelog generation, deployment-readiness scoring, and gating releases with GO/NO-GO decisions for git + conventional-commits projects.
This skill does NOT cover: the actual deploy/orchestration execution (handled by senior-devops / devops-workflow-engineer), test authoring (senior-qa), or deep security scanning beyond secret pattern-matching (senior-secops).
| Skill | Integration |
|-------|-------------|
| senior-devops | Pipeline stages consume pre-flight and readiness JSON as gates |
| senior-qa | Test results feed Tests category (25% weight) |
| senior-secops | Secret scan and CVE counts feed Security category (15%) |
| code-reviewer | Code quality metrics feed Code Quality category (20%) |
| devops-workflow-engineer | Workflow YAML calls tools as pipeline steps |
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.
Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Comprehensive AWS security posture assessment using AWS CLI and security best practices
Take borghei/release-orchestrator from the repository into ~/.claude/skills for personal
use, or into .claude/skills inside a project.
The agent identifies a skill by the name field in its header. Two skills with the
same name cannot sit side by side — one of them will be ignored.