changelog-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited changelog-generator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Tier: POWERFUL Category: Engineering Domain: Release Management / Documentation
Use this skill to produce consistent, auditable release notes from Conventional Commits. It separates commit parsing, semantic bump logic, and changelog rendering so teams can automate releases without losing editorial control.
major, minor, patch) from commit streamAdded, Changed, Fixed, etc.)python3 scripts/generate_changelog.py \
--from-tag v1.3.0 \
--to-tag v1.4.0 \
--next-version v1.4.0 \
--format markdowngit log v1.3.0..v1.4.0 --pretty=format:'%s' | \
python3 scripts/generate_changelog.py --next-version v1.4.0 --format markdown
python3 scripts/generate_changelog.py --input commits.txt --next-version v1.4.0 --format jsonCHANGELOG.mdpython3 scripts/generate_changelog.py \
--from-tag v1.3.0 \
--to-tag HEAD \
--next-version v1.4.0 \
--write CHANGELOG.mdWhen the user has not decided the next version, derive it instead of guessing:
git log v1.3.0..HEAD --oneline | \
python3 scripts/version_bumper.py --current-version 1.3.0 --output-format jsonOutput JSON contains recommended_version, bump_type (major/minor/patch/none), and with --include-commands the exact git tag commands. Feed recommended_version into generate_changelog.py --next-version. Pre-releases: add --prerelease alpha|beta|rc. Input must be real git log --oneline output (hex hashes); a sample lives at assets/sample_git_log.txt.
python3 scripts/commit_linter.py --from-ref origin/main --to-ref HEAD --strict --format textOr file/stdin:
python3 scripts/commit_linter.py --input commits.txt --strict
cat commits.txt | python3 scripts/commit_linter.py --format jsonSupported types:
feat, fix, perf, refactor, docs, test, build, ci, choresecurity, deprecated, removeBreaking changes:
type(scope)!: summaryBREAKING CHANGE:SemVer mapping:
majorfeat -> minorpatchpython3 scripts/generate_changelog.py --help--inputpython3 scripts/commit_linter.py --help--strict mode on violationsfeat(api): ...) in multi-package repos.[Unreleased] section for manual curation when needed.When a release goes wrong, classify before acting (full procedures in references/hotfix-procedures.md):
| Severity | Definition | SLA | Approval |
|---|---|---|---|
| P0 — Critical | Outage, data loss, exploited vulnerability | Fix deployed ≤ 2h; emergency deploy bypasses normal gates | Engineering Lead + On-call Manager |
| P1 — High | Major feature broken, significant user impact | Fix deployed ≤ 24h; expedited review | Engineering Lead + Product Manager |
| P2 — Medium | Minor issues, limited impact | Next release cycle | Standard PR review |
Hotfix branch comes from the last stable tag, contains the minimal fix only, and gets its own patch-bump changelog entry via the workflow above.
Pre-commit to these thresholds before tagging; roll back when any fires:
| Trigger | Threshold |
|---|---|
| Error rate spike | > 2x baseline within 30 min |
| Performance degradation | > 50% latency increase |
| Feature failure | Core functionality broken |
| Security incident | Vulnerability being exploited |
| Data corruption | Database integrity compromised |
Prefer feature-flag disable over code rollback; database rollbacks only for non-destructive migrations (forward-only migrations preferred). See references/hotfix-procedures.md.
Use this release flow for predictability:
Security section.commit_linter.py --strict on all PRs.CHANGELOG.md on main branch.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.