Release Blocklet Projects Reliably
Blocklet releases require version, changelog, build, metadata, and bundle checks. This skill guides Claude, Codex, or Claude Code through that release workflow.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "blocklet-updater" from https://skillstore.io/skills/arcblock-blocklet-updater.md and its manifest at https://skillstore.io/api/skills/arcblock-blocklet-updater/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "blocklet-updater". Bump and bundle this Blocklet.
Expected outcome:
The assistant identifies the version bump method, asks before running project scripts, validates metadata, and reports the created bundle location.
Using "blocklet-updater". The build output changed from dist to build.
Expected outcome:
The assistant checks the generated entry point, updates blocklet.yml main when appropriate, and explains the file change.
Using "blocklet-updater". This project has no build script.
Expected outcome:
The assistant skips installation and build steps, verifies a root index.html entry point, then runs metadata and bundle checks.
The audit found many static matches caused by Markdown formatting and read-only project checks, and those were dismissed. Real risk remains because the skill automatically runs project-defined version and build scripts, and it includes an instruction that suppresses final user-visible reporting.
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/arcblock-blocklet-updater/audits/12?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/arcblock-blocklet-updater?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/arcblock-blocklet-updater?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/arcblock-blocklet-updater/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/arcblock-blocklet-updater.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ArcBlock. (2026). blocklet-updater security audit report (audit version 12) [Author version unspecified]. Skillstore. https://skillstore.io/skills/arcblock-blocklet-updater/audits/12@techreport{arcblock-arcblock-blocklet-updater-2026,
author = {ArcBlock},
title = {blocklet-updater security audit report (audit version 12)},
institution = {Skillstore},
year = {2026},
number = {12},
url = {https://skillstore.io/skills/arcblock-blocklet-updater/audits/12},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "blocklet-updater security audit report (audit version 12)"
version: "unspecified"
type: report
authors:
- name: "ArcBlock"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/arcblock-blocklet-updater/audits/12"
identifiers:
- type: other
value: "skillstore:arcblock-blocklet-updater:audit:12"
description: "Skillstore immutable audit report identifier"
Bump the project version, verify metadata, build assets, and create a release bundle.
Check changelog entries, output directories, and blocklet.yml main before bundling.
Skip build steps when no build script exists and bundle a static project with an index.html entry point.
Create a new release bundle for this Blocklet project. Confirm each command before running it.
Bump the Blocklet version, then verify the changelog entry and blocklet.yml version before building.
Build this Blocklet, locate the generated index.html, and align blocklet.yml main with the output directory.
Review the release workflow without running commands. List the detected version method, build steps, metadata checks, and risks.
Author
ArcBlockLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/ArcBlock/agent-skills/tree/main/plugins/blocklet/skills/blocklet-updaterRef
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Maintenance freshness
7/18/2026
Usage
5 downloads · 262 views
File structure
Release Baoyu Skills Safely
by jimliu
Manual releases can miss changelog, version, and tag steps. This skill guides a repeatable release workflow for baoyu-skills with bilingual changelogs and local git tagging.
Prepare Reliable Software Releases
by BPSAI
Release work can miss tests, version files, documentation, or publication steps. This skill provides a structured checklist for validation, version updates, builds, Git tags, and release notes.
Automate Marketplace Plugin Releases
by Emasoft
Marketplace maintainers must release plugins without mixing versions across a shared repository. This skill guides validation, version updates, tags, pushes, and GitHub releases for one plugin at a time.
Run Project Tasks with Just
by 0xDarkMatter
Project commands are often hidden across scripts, docs, and package files. This skill discovers just recipes and runs common tasks from one workflow.
Push Projects to GitHub Safely
by yunshu0909
Publishing a local project can expose secrets or fail because of large files. This skill guides GitHub setup, push, and release steps with checks and confirmations.
Manage GitHub Releases
by DNYoussef
Release work often spans versioning, testing, changelogs, artifacts, and deployment checks. This skill gives Claude, Codex, and Claude Code a structured release workflow.