release-engine — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited release-engine (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the task is to ship a Rails engine as a gem or prepare a new version.
| Bump | When to use | Action |
|---|---|---|
| Patch | Bug fixes and internal changes without public behavior breakage | Update version constant, document under Fixed |
| Minor | Backward-compatible features and new extension points | Update version constant, document under Added/Changed |
| Major | Breaking changes to API, setup, routes, migrations, config, or supported framework versions | Update version constant, document under Changed/Deprecated; write explicit upgrade notes |
DO NOT release without updating CHANGELOG and version file.bundle exec rspec. Fix all failures before proceeding.module MyEngine; VERSION = "1.2.0"; end in lib/my_engine/version.rb.gem build *.gemspec && gem push --dry-run *.gem. Verify contents.gem push *.gem.Load release assets conditionally and say which one informed the output:
assets/release_checklist.md when producing the release verification checklist or quality gates.assets/release_notes_template.md when drafting GitHub release notes, a long-form announcement, or public release copy.assets/examples.md only when the user needs concrete release examples.Changelog Guidelines
Examples
## [1.2.0] - 2024-03-15
### Added
- `widget_count` config option to limit dashboard widgets (default: 10).
### Changed
- Minimum Rails version is now 7.0.lib/[engine_name]/version.rb.bundle exec rspec.gem build *.gemspec && gem push --dry-run *.gem plus contents verification (tar tf pkg/*.gem or gem contents).assets/release_checklist.md, assets/release_notes_template.md, assets/examples.md was loaded, or explicitly say none was needed.| Skill | When to chain |
|---|---|
| document-engine | Updating README, setup instructions, or API docs for the release |
| upgrade-engine | Verifying Rails/Ruby version support or deprecation impact |
| test-engine | Ensuring tests pass before release and match documented behavior |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.