Score breakdown0 Version history1 Source
Category Weight Category score Contribution
Security prompt, exec, net, exfil, eval
35%
100
35.0 pts
Supply chain hash, typosquat, maintainer, lockfile
20%
100
20.0 pts
Maintenance staleness, pinning, CI
15%
100
15.0 pts
Transparency SKILL.md, perms, README
15%
100
15.0 pts
Community installs, verify, response
15%
100
15.0 pts
Findings & checks · 0 flagged
Security score 100 · 0 findings
✓ — All security checks passedNo findings in this category for the latest scan. pass
Supply chain score 100 · 0 findings
✓ — All supply chain checks passedNo findings in this category for the latest scan. pass
Maintenance score 100 · 0 findings
✓ — All maintenance checks passedNo findings in this category for the latest scan. pass
Transparency score 100 · 0 findings
✓ — All transparency checks passedNo findings in this category for the latest scan. pass
Community score 100 · 0 findings
✓ — All community checks passedNo findings in this category for the latest scan. pass
Every scanned point with the score it earned and what moved between them.
1 scans · 90 days db17eed latest
Jun 24, 2026 100 db17eed
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
.github/skills/changelog-release/SKILL.md · 1 file .github/skills/changelog-release/SKILL.md 2.2 KB · Markdown Rendered Raw ⧉ Copy
name : changelog-release
description : Keep CHANGELOG.md current for releases and create the matching git tag during publishing.
Changelog Release Skill Use When The user asks to update CHANGELOG.md The user asks to prepare or publish a release The package version changed or is about to change The user wants release notes or git tags kept in sync with published versions Required Workflow Confirm the release version source of truth: Read package.json and use its version field as the release version Keep server.json synchronized when applicable via npm run sync-server-version Update CHANGELOG.md before publishing: Add or revise the top release section using the repository format: ## [x.y.z] - YYYY-MM-DD Group notable user-facing changes under headings such as Added, Changed, Fixed, and Removed Keep entries concise and release-oriented; do not dump commit-by-commit details Preserve the existing changelog style instead of introducing an Unreleased section unless the repository is already using one Validate release scope against the working tree: Review the meaningful source, docs, and packaging changes that belong in the release notes Do not describe unrelated dependency churn unless it materially affects users or publishing Publish from the release commit: Prefer the consolidated command: npm run publish:all This repository’s publish flow now ends with npm run publish:tag, which creates the local annotated git tag v<version> if it does not already exist Verify release metadata after publishing: Ensure the changelog version matches package.json Ensure the git tag name matches the version exactly: v<package.json version> If needed, push the created local tag separately with git once publishing is confirmed Validation Checklist CHANGELOG.md has a correct top release entry for the current versionThe changelog date matches the intended release date package.json and server.json versions are aligned when requirednpm run publish:all includes the tag creation stepnpm run publish:tag is safe to rerun and skips if the tag already exists