Skip to content
Back to skills

2529 Release Protocol B1b92a4f

BSecurity

Pre-release checklist for Nucleus MCP Server

  • 9 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 11, 2026
testingpythongobashgit

Works with

  • mcp

Security analysis

B89/100
  • highPerforms destructive filesystem operations
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 2529-release-protocol_b1b92a4f --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 2529 Release Protocol B1b92a4f?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 2529 Release Protocol B1b92a4f
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-2529-release-protocol-b1b92a4f/badge)](https://www.skillsdirectory.com/skills/tools-only-2529-release-protocol-b1b92a4f)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

SKILL.md
---
description: Pre-release checklist for Nucleus MCP Server
---

# Nucleus Release Protocol

> ⚠️ **DO NOT SKIP ANY STEP.** The v0.3.1 incident happened because Layer 2 was skipped.

## Layer 1: Pre-Flight

```bash
# 1. Ensure clean state
git status  # Must show "nothing to commit"

# 2. Check version is bumped
grep "version" pyproject.toml
cat CHANGELOG.md | head -20
```

- [ ] Version in `pyproject.toml` is incremented
- [ ] CHANGELOG.md has entry for this version
- [ ] All new dependencies added to `pyproject.toml`

---

## Layer 2: The Build (MANDATORY)

```bash
# 3. Run ALL tests
// turbo
python3.11 -m pytest tests/ -v

# 4. Fresh install simulation
python3.11 -m venv /tmp/nucleus-test-venv
source /tmp/nucleus-test-venv/bin/activate
pip install -e .

# 5. Manual E2E test
nucleus-init /tmp/test-brain
cat /tmp/test-brain/ledger/tasks.json  # Verify seed tasks exist

# 6. Cleanup
deactivate
rm -rf /tmp/nucleus-test-venv /tmp/test-brain
```

- [ ] All tests pass
- [ ] Fresh install works
- [ ] E2E verification complete

---

## Layer 3: Launch

```bash
# 7. Build
python3.11 -m build

# 8. Upload (requires token)
python3.11 -m twine upload dist/mcp_server_nucleus-X.Y.Z*

# 9. Verify from PyPI (not local!)
pip install --upgrade mcp-server-nucleus
python3.11 -c "import mcp_server_nucleus; print('OK')"
```

- [ ] Package built successfully
- [ ] Uploaded to PyPI
- [ ] Verified installation from PyPI works

---

## Rollback Plan

If something goes wrong after release:

```bash
# Publish a patch version immediately
# Example: 0.3.2 broke? Release 0.3.3 with the fix.

# Users can pin to previous working version:
pip install mcp-server-nucleus==0.3.1
```

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.