Skills github-release-assistant
๐Ÿ“ฆ

github-release-assistant

Content revision r1 Safe โš™๏ธ External commands๐ŸŒ Network access๐Ÿ“ Filesystem access

Generate Bilingual GitHub Release READMEs

Release notes and README updates can take time before each GitHub release. This skill generates bilingual release documentation and guides review, commit, and push steps.

Supports: Claude Codex Code(CC)
๐Ÿฅ‡ 83 Gold

This skill is part of 2 packs

Install the whole pack to get every skill the task needs, in one command.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "github-release-assistant" from https://skillstore.io/skills/zhanlincui-github-release-assistant.md and its manifest at https://skillstore.io/api/skills/zhanlincui-github-release-assistant/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "github-release-assistant". A maintainer asks for English and Chinese README files for a Python project.

Expected outcome:

The assistant creates README.md and README.zh.md with overview, contents, quick start, configuration, license, and credits sections.

Using "github-release-assistant". A contributor asks to review documentation before a GitHub release.

Expected outcome:

The assistant summarizes changed sections, identifies missing facts, and asks before any commit action.

Using "github-release-assistant". A documentation lead provides partial project metadata for a bilingual release.

Expected outcome:

The assistant uses available repository files, requests missing details, and produces consistent English and Chinese documentation.

Security Audit

Safe
v4 โ€ข 7/8/2026 Open versioned report

Most static findings are false positives caused by Markdown code fences, inline file names, CJK text detection, and README badge links. The real concerns are the Quick Start command in SKILL.md that executes a Python generator with overwrite enabled and uses an author-specific hidden .codex path. No evidence found of prompt injection or data exfiltration intent.

7
Files scanned
671
Lines analyzed
2
Review items
0
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
`python3 /Users/cuizhanlin/.codex/skills/github-release-assistant/scripts/generate_release_readme.py
The Quick Start instructs the agent to run a Python script with --overwrite against a project root. This is real external command execution that can replace README files.
Medium
Hidden file access
`python3 /Users/cuizhanlin/.codex/skills/github-release-assistant/scripts/generate_release_readme.py
The documented command uses an author-specific absolute path under a hidden .codex directory. Marketplace skills should avoid hardcoded hidden home-directory paths.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zhanlincui-github-release-assistant/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhanlincui-github-release-assistant/security.svg)](https://skillstore.io/skills/zhanlincui-github-release-assistant?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhanlincui-github-release-assistant?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-github-release-assistant/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhanlincui-github-release-assistant.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

ZhanlinCui. (2026). github-release-assistant security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhanlincui-github-release-assistant/audits/4

BibTeX citation

@techreport{zhanlincui-zhanlincui-github-release-assistant-2026, author = {ZhanlinCui}, title = {github-release-assistant security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/zhanlincui-github-release-assistant/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "github-release-assistant security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "ZhanlinCui" date-released: "2026-07-08" url: "https://skillstore.io/skills/zhanlincui-github-release-assistant/audits/4" identifiers: - type: other value: "skillstore:zhanlincui-github-release-assistant:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
77
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Prepare a bilingual release README

Generate English and Chinese README files from repository facts before publishing a GitHub release.

Refresh documentation before tagging

Update project overview, quick start, capabilities, and license sections before creating a release tag.

Standardize bilingual project docs

Use shared templates and style cues to keep release documentation consistent across repositories.

Try These Prompts

Create bilingual READMEs
Generate English and Chinese README files for this repository. Use existing project files and ask me for any missing release details.
Use a release config
Use my release_assistant.json file to generate both README files. Preserve factual project details and flag missing fields before writing.
Review generated documentation
Review the generated README.md and README.zh.md files. Summarize important changes, missing facts, and any sections that need manual edits.
Prepare a confirmed release commit
Generate the bilingual README files, show the diff, propose a concise commit message, and wait for my approval before any git commit or push.

Best Practices

  • Review generated README files before enabling overwrite or publishing changes.
  • Provide project names, taglines, feature lists, license, and Python version in the config file.
  • Confirm git staging, commit, and push actions only after reviewing the diff.

Avoid

  • Do not run the overwrite option without checking existing README content.
  • Do not publish generated release docs without verifying facts and links.
  • Do not rely on the hardcoded absolute path from the current Quick Start.

Frequently Asked Questions

Does this skill create both English and Chinese documentation?
Yes. It can generate README.md, README.zh.md, or both files from repository metadata and templates.
Does it need a configuration file?
No. A release_assistant.json file is optional, but it improves accuracy when project details are missing.
Will it overwrite existing README files?
Yes, when the overwrite option is used. Review existing documentation before running that mode.
Can it commit and push changes?
It can guide the workflow, but the instructions require user confirmation before staging, committing, or pushing.
Does it contact GitHub or external APIs?
No evidence found for runtime API calls. It only creates README content that may include external badge links.
What should authors fix before publishing this skill?
Replace the hardcoded hidden local path and require clear confirmation before overwrite operations.

Developer Details

Author

ZhanlinCui

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

64ca8af0f54a325752f08bd54e52151061ea659a

Maintenance freshness

7/20/2026

Usage

65 downloads ยท 184 views

File structure

๐Ÿ“ assets/

๐Ÿ“„ readme_template_en.md

๐Ÿ“„ readme_template_zh.md

๐Ÿ“„ release_config.example.json

๐Ÿ“ references/

๐Ÿ“„ readme_outline.md

๐Ÿ“„ redmax_style.md

๐Ÿ“ scripts/

๐Ÿ“„ generate_release_readme.py

๐Ÿ“„ SKILL.md

More from ZhanlinCui

View all
View all