pr-release-flow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pr-release-flow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
このスキルは /pr-release-flow として使う。
git status --short --branchgit fetch origin --prune --tagsPR_NUMBER=<n> PR_NO_PUSH=1 just prepare-release-prrelease/v であることを確認。release-v 系なら先に release/v に rename してから squash。PR_NUMBER=<n> just prepare-release-prgh pr checks <n> --repo HiroyukiFuruno/katana-markdown-linter --watchgh pr merge --merge --delete-branch <n>git switch main && git pull --ff-only origin mainjust VERSION=vX.Y.Z release-target-checkjust VERSION=vX.Y.Z release-checkjust VERSION=vX.Y.Z releasejust VERSION=vX.Y.Z release-verifyprepare-release-pr の PR更新は squash + -S(署名)に固定。release/v 以外(例: release-v*)のブランチは受け付けず、squash 前に rename する。--admin を使わない。main を必ずベースにして確認。release targetの失敗時は別ルート gh workflow run に逃げない。.codex/workflows/pr-release-runbook.md.codex/skills/prepare-release-pr/SKILL.mdjust/release.just の prepare-release-pr~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.