release-readiness-protocol — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited release-readiness-protocol (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Confirm a release is correct, documented, validated, publishable, and reversible before any external write such as a tag push, package publish, or GitHub release.
git tag, npm publish, gh release create, or equivalent.Read the current version from the relevant manifest and verify the target does not already exist:
npm view <pkg>@<version> version
pip index versions <pkg>
cargo search <pkg>Confirm bump type:
git describe --tags --abbrev=0
git log <last-tag>..HEAD --oneline --no-merges
git diff --stat <last-tag>..HEADFlag breaking changes, release-note gaps, and user-visible assets that changed.
For npm packages:
npm pack --dry-runRun the full release suite for the project:
npm test
npm run build
python scripts/validate-skills.py
python scripts/validate-catalog.pyIf a repository has a release preflight command, prefer it:
npm run release:checkWrite exact commands before executing them:
git tag vX.Y.Z -m "Release vX.Y.Z"
git push origin vX.Y.Z
npm publish --access public
gh release create vX.Y.Z --verify-tag --title "vX.Y.Z" --notes-file <notes>Wait for explicit approval before the first irreversible step.
| Step | Rollback |
|---|---|
| local tag | git tag -d vX.Y.Z |
| pushed tag | git push origin :refs/tags/vX.Y.Z |
| npm publish | npm deprecate <pkg>@<ver> "released in error" |
| GitHub Release | gh release delete vX.Y.Z --yes |
RELEASE READINESS: go / no-go
Version: X.Y.Z
Compare range: <last-tag>..HEAD
Changelog coverage: complete / gaps
Breaking changes: yes / no
Validation: <commands and result>
Publish plan: <exact commands>
Rollback plan: <exact commands>
Blockers: <none or list>~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.