release-extension — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited release-extension (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A checklist for releasing packages/extension-browser/ to the Chrome Web Store, Firefox Add-ons (AMO), and Edge Add-ons. The extension is private in package.json so the npm-side semver still matters for in-repo tooling; the actual user-facing artefacts are the per-browser zips.
The release-pilot agent owns the broader release coordination; this skill is the contributor-facing checklist.
(UX-visible bug fix, new feature, signed message-format change).
version-impact flagged the extension as needing a bump.major / minor / patch) — runversion-impact first.
repo.
pnpm available; node version per the root .nvmrc (if present).Walks the seven release steps in order. The skill lists them; the contributor executes them.
Edit packages/extension-browser/package.json and update version. The build step propagates this into the per-browser manifest.json.
Append to packages/extension-browser/CHANGELOG.md:
## <new-version> — YYYY-MM-DD
### Added / Changed / Fixed
- ...One line per bullet, plain factual ND-readable copy.
pnpm --filter @neurodock/extension-browser build:chrome
pnpm --filter @neurodock/extension-browser build:firefox
pnpm --filter @neurodock/extension-browser build:edgeEach command produces a target-specific bundle under packages/extension-browser/dist/<target>/.
pnpm --filter @neurodock/extension-browser zipProduces packages/extension-browser/dist/neurodock-<target>-<version>.zip for each browser.
pnpm --filter @neurodock/extension-browser test:e2eThe E2E suite exercises the side-panel, popup, right-click translate, and the native-host bridge. Recent regressions (commits 615c54a, f948e63) were caught by manual Gmail testing — automate them here when the suite grows.
git tag extension-browser/<new-version>
git push origin extension-browser/<new-version>For each browser, upload the matching zip via the relevant dashboard:
Each store does its own review; expect 1–7 days. Track status with release-pilot.
packages/extension-browser/store/ if the UIchanged.
CHANGELOG.md under the next repo-widerelease entry.
follow-up; the skill cannot resolve it.
or removed, update both package.json and this checklist.
release-pilot agent owns rollout comms; this skill stops at"submitted".
Treat this as a procedure. List the steps; do not editorialise about how exciting the release is. If a step fails (build, zip, E2E, store upload), stop and surface the exact error — do not paper over it.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.