release-change-analyzer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited release-change-analyzer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyzes unpublished changes by comparing HEAD with the latest published version. Reads actual diffs instead of just copying commit messages.
# npm
npm view <package-name> version 2>/dev/null || echo "not published"
# PyPI
pip index versions <package-name> 2>/dev/null | head -1
# Or use git tags
git tag --sort=-v:refname | head -1# Get actual diff (NOT just commit messages)
git diff v{published-version}..HEAD --stat
git diff v{published-version}..HEADFor each commit, MUST:
## Unpublished Changes (v{published} -> HEAD)
### Features
| Scope | What Changed |
|-------|--------------|
| auth | Added OAuth2 support with Google and GitHub providers |
### Fixes
| Scope | What Changed |
|-------|--------------|
| api | Fixed race condition in concurrent request handling |
### Refactoring
| Scope | What Changed |
|-------|--------------|
| core | Extracted retry logic from 3 services into shared module |
### Breaking Changes
- Removed deprecated `v1/login` endpoint
### Files Changed
42 files changed, 1205 insertions(+), 387 deletions(-)
### Suggested Version Bump
- **Recommendation**: minor
- **Reason**: New features added, no breaking changes in public API| Condition | Bump |
|---|---|
| Breaking changes in public API | major |
| New features, no breaking changes | minor |
| Bug fixes, refactoring, docs only | patch |
User: "What changed since last release?"
Output: Reads diff between v1.2.3 and HEAD, identifies 3 features, 2 fixes, 1 refactor, no breaking changes. Recommends minor bump to v1.3.0.
Inspired by: oh-my-opencode get-unpublished-changes command
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.