Individual skill
snowflake-native-app-release-sheriff
Preflight Snowflake Native App package releases from trusted, privacy-safe provider evidence without publishing, upgrading, altering, granting, or approving anything. Use when reviewing manifest/setup safety, security-scan gates, version and release-directive validation, App Spec or privilege changes, upgrade-cohort compatibility, and rollback readiness. Trigger with "Native App release", "application package scan", "upgrade cohort", or "App Spec".
plugins/saas-packs/snowflake-pack/skills/snowflake-native-app-release-sheriff/SKILL.md
Source commit 0500b275e963c027f6b410e8c49c0446945c574e
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 12, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 2,916
- Repository last updated
- Nov 12, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai Repository topic
- automation Repository topic
- claude-code Repository topic
- devops Repository topic
- mcp Repository topic
- ai-agents Repository topic
- anthropic Repository topic
- claude-code-plugins Repository topic
- developer-tools Repository topic
- llm Repository topic
- saas Declared skill tag
- snowflake Declared skill tag
- native-app Declared skill tag
- release Declared skill tag
- security Declared skill tag
- upgrade Declared skill tag
- rollback Declared skill tag
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 8,133 bytesSKILL.mdcore · 8,133 bytesSKILL.mdcore · 8,133 bytesSKILL.mdcore · 8,133 bytesSKILL.mdcore · 8,133 bytesSKILL.mdcore · 8,133 bytesSKILL.mdcore · 8,133 byteseval-spec.yamlasset · 4,227 bytesfixtures/incompatible-versions.jsonasset · 93 bytesfixtures/missing-scans.jsonasset · 72 bytesfixtures/partial-setup-failure.jsonasset · 89 bytesfixtures/removed-grants.jsonasset · 66 bytesfixtures/safe-cohorts.jsonasset · 98 bytesreferences/evidence-contract.mddoc · 4,581 bytesreferences/source-notes.mddoc · 3,448 bytesscripts/analyze_native_app_release.pyruns · 39,663 bytesscripts/collect_snowflake_evidence.pyruns · 98,463 bytesscripts/sql/native-app-release-directives-current.sqlasset · 3,513 bytesscripts/sql/native-app-upgrade-cohorts-current.sqlasset · 4,429 bytesscripts/sql/native-app-versions-current.sqlasset · 2,996 bytesscripts/test_analyze_native_app_release.pyruns · 24,387 bytes
Read excerpt
# Snowflake Native App Release Sheriff
## Purpose
Produce a deterministic, as-of provider-side release preflight. A clean result
is `READY_FOR_OPERATOR_RELEASE_AS_OF`, never permission or an instruction to
publish, set a release directive, upgrade an application, or alter privileges.
## Prerequisites
Read both reference files before analysis. The input must use the exact schema-2
contract in [`references/evidence-contract.md`](references/evidence-contract.md)
and must include independently retained hashes for the whole bundle, manifest,
setup script, normalized cohort rows/denominators, lifecycle evidence, and the