arm-pz

Ship Sentinel — DevOps skill for Claude Code

DevOps community

Claude Code mod that holds git push, PR, publish and deploy commands until your pre-ship check skills have run since the last edit.

How to install Ship Sentinel

This entry records only its repository, not the path inside it, so there is no exact command to give. Open arm-pz/ship-sentinel and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Ship Sentinel does

Claude Code mod that holds git push, PR, publish and deploy commands until your pre-ship check skills have run since the last edit. Ask, block or nudge mode. Fails open and touches no files, network or processes. A reminder for skills Claude skips, not a security boundary.

Alternatives in DevOps

Ship Release — Systematic release workflow for RTK: build verification, version bump, changelog update, git tag, and push to 11.9k ★
Kubeshark — Cluster-wide network observability for Kubernetes 11.8k ★
Mirrord — Run any process, on your machine or in an AI agent's environment, as if it were a pod in your Kubernetes clust 5.3k ★

README

ship-sentinel

A Claude Code mod that holds `git push`, PR, publish and deploy commands until your pre-ship check skills have run since your last edit. Use it when your checks are written as skills (a security pass, a performance audit, a preflight) and Claude sometimes skips them before shipping. The checks stay skills; the mod is only the trigger. It asks, blocks or nudges, fails open, and touches no files, network or processes.

Install: `/plugin install ship-sentinel --marketplace arm-pz/ship-sentinel`

Then tell it which skills count as your checks: `/plugin configure ship-sentinel@ship-sentinel`, for example `pre-ship-security-red-team,pre-ship-performance-audit`. The default is `release-gate`, which only does something if you have a skill with that name.

Needs Claude Code 2.1.287 or later (mods). Tested on 2.1.306.

It reacts to things like:

Claude running git push origin main, gh pr create, npm publish, wrangler deploy, terraform apply
You writing "ship it", "go live" or "deploy to prod"
Claude editing a file after the checks have run (the checks are then stale)

Ship Sentinel contains no checks of its own. Skills such as `pre-ship-security-red-team`, `pre-ship-performance-audit` and `web-preflight` from [skills.caffeinity.com](https://skills.caffeinity.com) are the kind of check it is built to trigger; any skill name works. To turn a skill of your own into a mod like this one, see [skill-to-mod](https://github.com/arm-pz/skill-to-mod).

What it does

Moment	What happens
Claude runs a ship command (`git push`, `gh pr create`/`merge`, `gh release create`, `npm`/`pnpm`/`yarn`/`bun publish`, `wrangler deploy`, `vercel --prod`, `netlify deploy --prod`, `docker push`, `dotnet nuget push`, `cdk`/`sam deploy`, `terraform apply`) and a required skill has not run since the last edit	Depends on the mode below
A required skill is expanded (typed as `/name`, run by the Skill tool, or preloaded by a subagent)	It counts