agent-brain-release — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-brain-release (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automates the release process for Agent Brain packages, including version bumping, changelog generation, git tagging, and GitHub release creation.
Before running any install commands, resolve the latest version:
# Get latest from PyPI (recommended)
LATEST=$(curl -sf https://pypi.org/pypi/agent-brain-rag/json | python3 -c "import sys,json; print(json.load(sys.stdin)['info']['version'])")
echo "Latest version: $LATEST"Current PyPI Versions:
Agent Brain consists of two PyPI packages that work together:
# Resolve latest version first
LATEST=$(curl -sf https://pypi.org/pypi/agent-brain-rag/json | python3 -c "import sys,json; print(json.load(sys.stdin)['info']['version'])")
# Install with pinned version
pip install agent-brain-rag==$LATEST agent-brain-cli==$LATEST# With GraphRAG support (knowledge graph retrieval)
pip install "agent-brain-rag[graphrag]==$LATEST"
# With all optional features
pip install "agent-brain-rag[graphrag-all]==$LATEST"| Package | Description | PyPI |
|---|---|---|
agent-brain-rag | RAG server with FastAPI, embeddings, and search | PyPI |
agent-brain-cli | CLI tool for managing Agent Brain instances | PyPI |
export OPENAI_API_KEY=your-openai-key
export ANTHROPIC_API_KEY=your-anthropic-key# Using CLI (recommended)
agent-brain init # Initialize project config
agent-brain start # Start server for current project
# Or run server directly
agent-brain-serve # Start on http://127.0.0.1:8000agent-brain index ./docs ./src # Index documentation and source codeagent-brain query "How does authentication work?"agent-brain stop/ag-brain-release <bump> - Create a release with specified version bump (command name)/ag-brain-release <bump> --dry-run - Preview release without making changesagent-brain-release for clarity; command entry is ag-brain-release.Where <bump> is one of:
major - Breaking changes (X.0.0 → X+1.0.0)minor - New features (X.Y.0 → X.Y+1.0)patch - Bug fixes (X.Y.Z → X.Y.Z+1)The release skill performs these steps:
main branchagent-brain-cli/pyproject.toml contains {path = "../agent-brain-server"}, replace with ^<server_version> from agent-brain-server/pyproject.toml and run poetry lock --no-update.agent-brain-server/pyproject.tomlagent-brain-server/pyproject.tomlagent-brain-server/agent_brain_server/__init__.pyagent-brain-cli/pyproject.tomlagent-brain-cli/agent_brain_cli/__init__.pyagent-brain-plugin/.claude-plugin/plugin.json — MUST match CLI/server versionchore(release): bump version to X.Y.ZvX.Y.Zgh release create with generated notespublish-to-pypi.yml workflowUse --dry-run to preview all changes without executing:
/ag-brain-release minor --dry-run
[DRY RUN] Would perform the following actions:
Current version: X.Y.Z
New version: X.Y+1.0
Files to update:
- agent-brain-server/pyproject.toml
- agent-brain-server/agent_brain_server/__init__.py
- agent-brain-cli/pyproject.toml
- agent-brain-cli/agent_brain_cli/__init__.py
- agent-brain-plugin/.claude-plugin/plugin.json
Commits since vX.Y.Z: <count>
No changes made.When /ag-brain-release is invoked, Claude should:
# Extract bump type and dry-run flag from command arguments
BUMP_TYPE="minor" # or major/patch from $ARGUMENTS
DRY_RUN=false # true if --dry-run present# Check for clean working directory
git status --porcelain
# Check current branch
git branch --show-current # must be "main"
# Check remote sync
git fetch origin
git status -sb # should show "## main...origin/main"# Extract version from pyproject.toml
grep '^version = ' agent-brain-server/pyproject.toml | cut -d'"' -f2# Version calculation logic
def bump_version(current: str, bump_type: str) -> str:
major, minor, patch = map(int, current.split('.'))
if bump_type == 'major':
return f"{major + 1}.0.0"
elif bump_type == 'minor':
return f"{major}.{minor + 1}.0"
else: # patch
return f"{major}.{minor}.{patch + 1}"# Update all 5 version files using sed or Edit tool
# See references/version-management.md for exact locations
# IMPORTANT: Update plugin.json version to match CLI/server:
# agent-brain-plugin/.claude-plugin/plugin.json → "version": "$NEW_VERSION"# Get commits since last tag
git log $(git describe --tags --abbrev=0)..HEAD --oneline
# Group by conventional commit prefix# Commit version changes
git add -A
git commit -m "chore(release): bump version to $NEW_VERSION"
# Create tag
git tag -a "v$NEW_VERSION" -m "Release v$NEW_VERSION"
# Push
git push origin main
git push origin "v$NEW_VERSION"gh release create "v$NEW_VERSION" \
--title "v$NEW_VERSION" \
--notes-file release-notes.md## What's Changed
### Features
- feat: description (#PR)
### Bug Fixes
- fix: description (#PR)
### Documentation
- docs: description (#PR)
### Other Changes
- chore/refactor/test: description (#PR)
## About Agent Brain
Agent Brain (formerly doc-serve) provides intelligent document indexing and semantic search for AI agents:
- **Semantic Search**: Natural language queries via OpenAI embeddings
- **Keyword Search (BM25)**: Traditional keyword matching with TF-IDF
- **GraphRAG**: Knowledge graph retrieval for relationship-aware queries
- **Hybrid Search**: Best of vector + keyword approaches
- **Pluggable Providers**: Choose your embedding and summarization providers
## PyPI Packages
- **agent-brain-rag**: https://pypi.org/project/agent-brain-rag/X.Y.Z/
- **agent-brain-cli**: https://pypi.org/project/agent-brain-cli/X.Y.Z/
## Installation
pip install agent-brain-rag==X.Y.Z agent-brain-cli==X.Y.Z
# With GraphRAG support
pip install agent-brain-rag[graphrag]==X.Y.Z
## Documentation
- [User Guide](https://github.com/SpillwaveSolutions/agent-brain/wiki/User-Guide)
- [Developer Guide](https://github.com/SpillwaveSolutions/agent-brain/wiki/Developer-Guide)
- [All Releases](https://github.com/SpillwaveSolutions/agent-brain/releases)
**Full Changelog**: [vPREV...vNEW](https://github.com/SpillwaveSolutions/agent-brain/compare/vPREV...vNEW)After creating a release, remind the user to:
publish-to-pypi workflow statusCommon issues and solutions:
| Error | Solution |
|---|---|
| Dirty working directory | Commit or stash changes first |
| Not on main branch | Switch to main: git checkout main |
| Behind remote | Pull latest: git pull origin main |
| Tag already exists | Version already released, use different bump |
| gh not authenticated | Run gh auth login |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.