publish — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited publish (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Prepare and publish a new version: $ARGUMENTS
This skill guides through the full release process. It does NOT auto-publish — it pauses for user confirmation at key points.
package.json$ARGUMENTS (default: patch)Current: X.Y.Z → New: A.B.CGet user confirmation before proceeding.
Verify the codebase is ready:
git status — working tree should be clean (no uncommitted changes)git branch — should be on main branchpackage.json, server.json, src/index.tsnpm run format:check — formatting is cleannpm run typecheck — no type errorsnpm run lint — no lint errorsnpm run test — all tests passnpm run build — build succeedsIf ANY check fails, stop and report. Do not continue with a broken build.
Update version in all 3 locations:
package.json → versionserver.json → version and packages[0].versionsrc/index.ts → server constructor versionnpm run buildThe dist/ directory must reflect the new version.
Show git diff so the user can verify:
Get user confirmation before committing.
git add package.json server.json src/index.ts dist/
git commit -m "chore: Bump version to A.B.C"
git tag vA.B.CShow the command but DO NOT run it automatically:
npm publish
git push origin main --tagsTell the user to run these commands themselves.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.