release — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited release (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Publish a new version of Coach to all distribution channels.
Before starting, verify the release is ready:
main branch: git branch --show-currentgit statusAsk the user which version bump to apply:
What type of release is this?
1. Patch (x.x.1) — Wording improvements, typo fixes, minor knowledge corrections
2. Minor (x.1.0) — New skills, significant instruction rewrites, new knowledge seed patterns
3. Major (1.0.0) — Knowledge schema changes that break compound data, or skill removalsRead the current version from package.json (the version field) and compute the new version.
Review what changed since the last release:
git log $(git describe --tags --abbrev=0 2>/dev/null || echo HEAD~10)..HEAD --onelineIf no tags exist yet, review all recent commits.
Draft a changelog entry in Keep a Changelog format. Group changes under the appropriate headings:
Present the draft to the user for approval before writing.
After the user approves the changelog, update versions in all locations:
4a. `package.json`
Run npm version <patch|minor|major> --no-git-tag-version to bump the version without creating a git tag (we tag manually later).
4b. `.claude-plugin/plugin.json`
Update the "version" field to match the new version.
4c. SKILL.md frontmatter
For each skill that changed in this release, update metadata.version in its SKILL.md frontmatter to the new version. Skills that did not change keep their existing version.
4d. `CHANGELOG.md`
Insert the approved changelog entry at the top of the file (below the header, above the previous release). Add the release link at the bottom:
[X.Y.Z]: https://github.com/Andamio-Platform/coach/releases/tag/vX.Y.Zgit add .
git commit -m "chore: release vX.Y.Z"
git tag vX.Y.ZDo not push yet — confirm with the user first.
Present the release summary and ask for confirmation:
Ready to publish vX.Y.Z to all channels:
1. GitHub — push main + tag
2. Claude Code marketplace — update andamio-marketplace version
3. npm — npm publish --access public (requires OTP)
Proceed?On confirmation, execute in order:
6a. GitHub
git push origin main
git push origin vX.Y.Z6b. Claude Code Marketplace
Read ~/projects/01-projects/andamio-marketplace/.claude-plugin/marketplace.json. Update the coach plugin's "version" field to the new version. Commit and push:
cd ~/projects/01-projects/andamio-marketplace
git add .
git commit -m "chore: bump coach to vX.Y.Z"
git push origin main6c. npm
cd ~/projects/01-projects/coach
npm publish --access publicThe user will need to authenticate with an OTP. Wait for confirmation that it succeeded.
Ask the user if they want a GitHub release:
gh release create vX.Y.Z --title "vX.Y.Z" --notes-file - <<< "CHANGELOG_ENTRY_HERE"Report what was published:
## Release Complete: vX.Y.Z
| Channel | Status | How users get it |
|---------|--------|------------------|
| GitHub | Pushed + tagged | git pull |
| Claude Code | Marketplace updated | /plugin marketplace update |
| npm | Published | npm update @andamio/coach |
| Community (SkillsMP, SkillHub) | Automatic | Crawlers re-index on their schedule |~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.