bump-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bump-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
✓ Every changed skill's version: was bumped and BOTH changelogs got their rows
✓ The lint results (all 7 authoring rules, including the two machine-surface
parity/ordering checks and the internal-skill discovery-exclusion check)
were reported
✓ The git add + commit command block is printed as the ABSOLUTE last outputAbout to end the turn with any box unchecked? The turn is NOT done — complete the missing box first.
After any edit to one or more skills/<name>/SKILL.md files in this repo, before committing. Handles the full documentation surface so nothing drifts.
This skill is specific to the `agentic-workflow` repository. Before doing anything, confirm you are in that repo (presence of skills/ + CHANGELOG.md + CHANGELOG.md). If not, stop and tell the user.
Versioning policy (from CHANGELOG.md):
| Bump | When |
|---|---|
| major | rename, removed/renamed flag, changed contract or output shape — ships with a migration note |
| minor | new backward-compatible capability: new flag, new section, new routing case |
| patch | wording, examples, clarifications, internal tidy — no behavior change |
The reference allowlist is exactly the two paths below. After orientation:
Both resources are normative and one hop from this file. Missing resource → stop; never guess a bump or skip a synchronization surface.
Print a table:
skill old → new bump
─────────────────────────────────────────
execute-phase 1.2.0 → 1.3.0 minor
unit-lane 1.0.0 → 1.0.1 patchThen print the next step:
All documentation updated. Stage and commit: ``git add skills/<name>/SKILL.md CHANGELOG.md README.md git commit -m "chore(skills): bump <name> to <version> — <one-line reason>"`If this is a major bump with a migration note, also adddocs/workflow/MIGRATION.md`.
still update the SKILL.md version and CHANGELOG entries, but warn that the diff-based bump analysis is unavailable for untracked files — ask the user what changed.
and length; change only what is factually wrong or missing.
This skill is repo-maintenance for agentic-workflow itself, but the repo may be worked on from any agent:
SKILL.md directly after editing anyskill, before committing.
mechanical version/changelog bookkeeping.
execute-phase touches askill file, and before the commit.
AGENTS.md section "Version every change" is the policy this skillenforces mechanically.
docs/workflow/MIGRATION.md,which init-workspace reads when installing.
version: field is updated.CHANGELOG.md has a new row for every bumped skill, newest first.README.md skills and model tables are accurate.→ Next: block, S1/"Step" phase labels,a user-invocable: true skill absent from plugin.json, a non-alphabetical machine surface) are reported for the user to fix before committing.
git add + git commit command, readyto run.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.