メニュー
Drive the changesets-based release flow for the agent-id npm packages. Use when the user wants to release packages, cut a version, declare a release intent, enter or exit a beta cycle, or check what's pending for the next release.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Drive Alien Browser with an anonymous L0 profile created automatically for public pages, or a logged-in profile sealed in the agent vault. Inspect forms compactly and fill/verify up to 50 fields, checks, selects, and file uploads in one call; use fine-grained refs, screenshots, tabs, dialogs, and downloads for the rest. By default all sites share ONE session; pass --name only for a separate isolated session. Credentials and 2FA use the secure vault injection path and are never seen by the agent. Sessions may be sealed READ-ONLY, where writes are blocked at the network layer.
Local credential-injecting HTTP proxy. The agent calls `http://localhost:PORT/<credname>/<upstream-host>/<path>`; the proxy looks up the credential in the vault, validates the host against that credential's allowlist (default-deny), materializes the credential into the appropriate request location, and forwards over real HTTPS. For vault-generated wallet credentials it signs blockchain transactions in-process — Solana `sendTransaction` bodies are ed25519-signed, EVM `eth_sendTransaction` becomes a signed EIP-1559 `eth_sendRawTransaction`. The agent never sees the credential value or private key. Use whenever the agent calls an external service with a vaulted credential, or needs to send a blockchain transaction from a vault-held wallet (payments, trading, x402, transfers).
Portable encrypted credential vault with LUKS-style slots (passkey/Touch ID, passphrase, agent-key, phone) and typed/domain-scoped credential records. Credentials can carry an ACCESS LEVEL (--access ro) so the agent can read a service but never write to it — enforced by the proxy and the sealed browser, widened only with the owner's out-of-band confirmation (set-access). Pairs with agent-id-proxy so the agent never sees credential values — the proxy injects them at request time. Can also GENERATE blockchain wallet keys (Solana ed25519, EVM secp256k1) inside the vault — the private key is sealed, only the address is printed, and transactions are signed by the proxy. Use whenever the user asks to save, fetch, or remove a service credential, create a crypto wallet for the agent, or whenever a downstream tool needs an external-service secret that must not appear in shell history, source files, or process arguments.
DPoP-signed (RFC 9449) authenticated calls to Alien-aware services. Discover any Alien-aware service's manifest at /.well-known/alien-agent-id.json, render its operations as actionable markdown, emit DPoP headers for one request, or one-shot a signed HTTP call with the agent's identity attached. Use when the user gives you a URL on an Alien-aware service (alien-api.com, alien.org, agent-sso.*), asks to call an Alien-aware endpoint, asks what an Alien-aware service can do, or mentions DPoP, agent-bound access tokens, or `cnf.jkt`.
Create and manage an AI agent's cryptographic identity — a local Ed25519 key that works immediately (sign, verify, run the vault, make commits) with no account or sign-up. Optionally bind it to a verified human via Alien Network SSO (OIDC + DPoP) when you want third-party-provable provenance; check or refresh the identity's state; sign or verify operations in the agent's local hash-chained audit trail. Use when the user asks to set up or bootstrap an agent identity, check whether one exists, add or refresh human binding, migrate a pre-v3 binding, or sign / verify / export-proof an operation. Also triggers on "Alien ID", "Agent ID", "agent identity", "DPoP", "cnf.jkt", or "owner binding".
SSH-signed git commits with Alien Agent ID provenance trailers and a v3 proof note. Sign every line of agent-written code so it is cryptographically attributable to the agent + a verified human owner via Alien Network SSO. Verify provenance on any commit — your own or third-party — without needing the signer's local state. Use when the user asks to make a signed commit, push agent-signed work, check the Agent-ID chain on a commit, audit who signed a commit, or configure git for SSH-format signing with the bound agent key.
| name | release |
| description | Drive the changesets-based release flow for the agent-id npm packages. Use when the user wants to release packages, cut a version, declare a release intent, enter or exit a beta cycle, or check what's pending for the next release. |
| disable-model-invocation | false |
| user-invocable | true |
Only two packages publish to npm: @alien-id/agent-id-core and
@alien-id/agent-id-vault. The four consuming plugins (agent-id-auth,
agent-id-git, agent-id-proxy, agent-id-browser) are private and
ignored by changesets — they ship through the Claude Code marketplace, not npm.
The pipeline is fully automated by changesets. A maintainer's only manual gates
are: write a .changeset/*.md on the feature PR, merge the bot-opened
"chore: release packages" Version PR, and approve the npm-publish environment.
See RELEASING.md for the full mental model. This skill drives the
conversational shape of the flow.
When invoked, first run bun changeset status --verbose and figure out which
branch applies:
Feature PR in progress. If the change touches plugins/agent-id-core/**
or plugins/agent-id-vault/**, help the user declare a release intent with
bun changeset and commit the resulting .changeset/*.md alongside the code.
Stop after that. (Changes to only the private plugins need no changeset.)
Pending changesets on main, no Version PR yet. changesets/action
opens it on the next push to main. If they just merged, wait ~30s then point
them at the PR list.
Version PR open. Read it (it lists computed bumps + cascade + the synced
plugin.json/marketplace.json versions). If ready: review → squash-merge →
approve the npm-publish environment → watch the workflow. Surface the
GitHub Actions URL.
Beta cycle decision. If .changeset/pre.json is absent and the user wants
a beta cycle, run bun changeset pre enter beta and open a one-line PR. If
pre.json exists and they want stable, run bun changeset pre exit and open a
one-line PR.
Partial publish failure. Re-run the workflow from the GitHub Actions UI.
publish-topological.ts skips already-published packages (via npm view) and
resumes. Do NOT manually edit versions or tags.
First-ever publish (bootstrap). @alien-id/agent-id-core@7.0.0 and
@alien-id/agent-id-vault@7.0.0 must exist on npm before the dependent
marketplace plugins can install. Either let the gated publish job do it on the
first merge, or publish manually once (see RELEASING.md → Bootstrap).
bun changeset
# Interactive: pick core and/or vault, bump type (patch/minor/major), summary.
git add .changeset/<id>.md
The summary line becomes the per-package CHANGELOG entry. Write it for a consumer: "Add X", "Fix Y", "Breaking: rename Z."
@alien-id/agent-id-core patches
@alien-id/agent-id-vault (the only published dependent). The four ignored
plugins are NOT version-bumped, but changeset version DOES rewrite their
@alien-id/agent-id-{core,vault} dependency ranges — so the Version PR carries
package.json diffs for them too. That is intended (the runtime install hook
copies each plugin's package.json).ci:version runs changeset version && bun install && bun run sync-plugin-versions. The sync step copies each plugin's package.json
version into its .claude-plugin/plugin.json and the marketplace.json entry.
package.json is the single source of truth; CI fails on drift either way..mjs; ci:publish packs and
publishes raw — there is no compile.^semver, not workspace:*. The marketplace installer
runs npm, which can't resolve workspace:. bun workspaces still link locally.npm publish auth failure means the trusted-publisher config on npm needs to
authorize release.yml for the failing package — an operator task, not code.plugins/*/package.json version fields by hand. changeset version computes them, and sync-plugin-versions propagates them.plugin.json / marketplace.json versions — they are derived.bun.lock manually after changeset version; ci:version's
bun install regenerates it.changeset tag (inside ci:publish) creates them.npm-publish environment reviewer gate.