Overview
shipping-artifacts is an open-source security skill for Claude Code and compatible agents, published by phuryn. Its author describes it as: “The durable documentation set that makes an AI-built (vibe-coded) app reviewable before shipping. A small core every app needs — architecture, user/permission flows, permissions, variables/secrets, and a test-coverage…”. The project has 25k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add phuryn/pm-skills`.
What shipping-artifacts does
AI agents write code fast, but they leave no durable record of *intent* — what the system is supposed to do, who is allowed to do what, where the secrets live, which rules are actually verified. Without that record, no human (and no auditing agent) can tell whether the code is safe to ship. This skill defines the small set of documents that restore reviewability.
Best for
What’s inside
The SKILL.md for shipping-artifacts is organised into these sections:
- Purpose
- How the set is organized
- Core documents
- Conditional documents (include only when the capability exists)
- Notes
Installation
Add shipping-artifacts to your agent with:
/plugin marketplace add phuryn/pm-skillsReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — ships a claude code plugin marketplace
License
shipping-artifacts is published under the MIT license.
Strengths
- Clear MIT license — safe to read and adapt within its terms
- Ships in phuryn/pm-skills, an established project with 25,392 GitHub stars
- Works with Claude Code
- Actively maintained — repository updated in the last 90 days
Author
Topics
Alternatives to shipping-artifacts
Similar skills from other repositories:
Frequently asked questions
- What does shipping-artifacts do?
- The durable documentation set that makes an AI-built (vibe-coded) app reviewable before shipping. A small core every app needs — architecture, user/permission flows, permissions, variables/secrets, and a test-coverage map — plus conditional docs added only when they apply: emails, scheduled work, SEO, and embedded agents/automation. Defines what each doc must capture and how a reviewer or auditor uses it. Use when documenting a codebase for handoff, mapping user journeys and trust-boundary crossings, planning test coverage, or preparing for a security or performance audit.
- How do I install shipping-artifacts?
- Run /plugin marketplace add phuryn/pm-skills in your agent, then reload your skills. Review the source at https://github.com/phuryn/pm-skills before installing.
- Is shipping-artifacts free to use?
- Yes. shipping-artifacts is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Which agents does shipping-artifacts work with?
- shipping-artifacts lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does shipping-artifacts come from?
- shipping-artifacts ships inside phuryn/pm-skills, a repository that contains 41 catalogued skills in total. The repository's 25,392 GitHub stars apply to that whole collection, not to this skill on its own.
