Changelog Generator

v1.0.0

Generates structured changelogs from git history. Keep a Changelog format with PR/issue links.

0· 494·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description match the SKILL.md instructions: produce Keep a Changelog–style release notes grouped by standard sections. The skill does not request unrelated binaries, credentials, or system access.
Instruction Scope
SKILL.md contains only rules for structuring changelogs (sections, linking PRs/issues, user-facing language, migration notes). It does not instruct the agent to read unrelated files, exfiltrate data, or access secrets. It is somewhat minimal about how to obtain git history or PR URLs (it assumes the agent has repository context), but this is scope-consistent rather than suspicious.
Install Mechanism
No install spec and no code files — instruction-only. Nothing will be written to disk or downloaded by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths. That is proportionate for a changelog-formatting instruction set.
Persistence & Privilege
always is false and the skill does not request any persistent presence or modify other skills/config. Autonomous invocation is allowed by default (platform normal) but is not combined with broad privileges here.
Assessment
This skill is instruction-only and appears safe and coherent: it tells the agent how to format changelogs but does not itself access credentials or install code. Two practical points before enabling it: (1) the skill assumes the agent has access to the repository/git history (local workspace or a checked-out repo); if the agent cannot see the repo it cannot generate the changelog. (2) 'Link to PRs/issues' implies mapping commit messages or PR numbers to remote URLs (e.g., GitHub/GitLab); the agent may need network access or knowledge of the remote host to produce working links. If you care about data privacy, ensure the agent's environment only contains repository data you are willing to have processed. Otherwise, installing this skill carries no obvious additional risk.

Like a lobster shell, security has layers — review code before you run it.

latestvk974kw75a6588eqfh3bhk0pess81q3xj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments