changelog — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited changelog (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Produce a changelog from what actually shipped: the commits, merged PRs, and references between two points in history. Write it for the people who read releases (users, integrators), not as a raw git log dump.
CHANGELOG.md or a changelog tool already exists, follow its structure, headings, and conventions exactly. Don't impose a new style on an established file.git describe --tags --abbrev=0 gives the latest tag; the range is <lastTag>..HEAD.<olderTag>..<newerTag>.git log <range> --no-merges --pretty=format:'%H %s' (and %b for bodies, to catch BREAKING CHANGE: footers).git log <range> --merges and (#123) references in subjects.feat, fix, perf, refactor, docs, etc.), scopes, the ! breaking marker, and issue/ticket references (#123, JIRA-456, CU-abc).Look before you write; adopt what's already in use:
CHANGELOG.md / CHANGES/HISTORY file → mirror its format (most follow [Keep a Changelog](https://keepachangelog.com)).conventional-changelog/standard-version, release-please, changesets (.changeset/), git-cliff (cliff.toml), towncrier (newsfragments/), auto, semantic-release. If one is configured, prefer driving it over hand-writing, and explain how to run it.Default to Keep a Changelog sections, mapping Conventional Commits onto them:
| Section | Sourced from |
|---|---|
| Added | feat |
| Changed | refactor, perf, behavior-changing updates |
| Deprecated | commits marking something deprecated |
| Removed | removals |
| Fixed | fix |
| Security | security fixes (CVE/advisory references) |
List Breaking changes in their own prominent block (from ! markers and BREAKING CHANGE: footers), with the migration path. Omit chore, ci, build, style, and test unless user-visible.
... (#123), ticket IDs, or commit short-SHAs per the project's style.## [1.4.0] - 2025-06-06. Use ## [Unreleased] if the version isn't cut yet.[Unreleased]/top of file; never disturb prior releases.[1.4.0]: https://…/compare/v1.3.0...v1.4.0).Report the version, the range covered, and any commits you deliberately excluded as noise, so the result is auditable.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.