changelog-monitor — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited changelog-monitor (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Track releases, changelogs, and breaking changes from any software project's web page.
CF Browser MCP server must be configured (see the CF Browser quick start).
GitHub releases, framework changelogs, and library docs are often JS-rendered pages that WebFetch can't read. This skill uses browser_json to extract structured release data from any page.
From the user's input, resolve the changelog URL:
https://github.com/{owner}/{repo}/releaseshttps://github.com/{owner}/{repo}/releases (resolve via npm registry)https://nextjs.org/blog)browser_json(url, prompt="Extract the latest N releases with version, date, and key changes as JSON array")For changelog pages (non-GitHub):
browser_json(url, prompt="Extract version entries with version number, release date, and list of changes")For each release:
Output a structured summary:
## {Project} — Latest Releases
### v2.1.74 (2026-03-12)
- **NEW**: Added `autoMemoryDirectory` setting
- **FIX**: Fixed memory leak in streaming API response buffers
- Action needed: None
### v2.1.73 (2026-03-11)
- **NEW**: Added `modelOverrides` setting
- **FIX**: Fixed freezes and 100% CPU loops
- Action needed: Update recommended (stability fix)
### v2.1.72 (2026-03-10)
- **NEW**: Tool search bypasses third-party proxy gate
- Action needed: Noneurl or project (required): GitHub repo, npm package name, or direct changelog URLcount (optional, default=5): Number of releases to fetchbaseline_version (optional): Compare against a version supplied by the user or already recorded in the current workspace. This skill does not create a persistent scheduler by itself."What's new in Claude Code?"
→ browser_json("https://github.com/anthropics/claude-code/releases") → structured summary
"Check for breaking changes in Next.js 15"
→ browser_json("https://nextjs.org/blog") → filter breaking changes
"Latest Hono releases"
→ browser_json("https://github.com/honojs/hono/releases") → version + changes
"Has Astro released anything since 5.18?"
→ Extract releases → filter versions > 5.18~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.