Skills releasing-versions

📦

releasing-versions

Name: releasing-versions
Author: BPSAI

Content revision r1 Safe ⚙️ External commands📁 Filesystem access

準備可靠的軟體發布

發布工作可能會遺漏測試、版本檔案、文件或發布步驟。此技能提供結構化檢查清單，用於驗證、版本更新、建置、Git 標籤和發布說明。

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Maintain this Skill? Claim it 🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "releasing-versions" from https://skillstore.io/skills/bpsai-releasing-versions.md and its manifest at https://skillstore.io/api/skills/bpsai-releasing-versions/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/bpsai-releasing-versions.md Signed manifest GET /api/skills/bpsai-releasing-versions/manifest Signed lockfile GET /api/skills/bpsai-releasing-versions/lockfile

Test it

Using "releasing-versions". 準備發布版本 2.9.0 以供審查。

Expected outcome:

發布就緒報告會列出任務狀態、測試結果、覆蓋率、安全掃描狀態、文件檢查、建置成品和核准關卡。

Using "releasing-versions". 檢查下一次發布前文件是否為最新。

Expected outcome:

回應會識別變更日誌涵蓋範圍、README 新鮮度、功能矩陣狀態，以及任何範本同步警告。

Using "releasing-versions". 建置成功後建立最終交接。

Expected outcome:

交接會摘要已完成的檢查、剩餘警告、產生的套件成品，以及仍需維護者核准的發布命令。

Security Audit

Safe

v10 • 7/9/2026 Open versioned report

The static backtick alerts are mostly Markdown code fences or inline filenames, not Ruby execution. I confirmed four command blocks with real operational risk: build cleanup and package installation, Git commit and tag creation, Git push, and PyPI upload. No evidence found for prompt injection, credential exfiltration, or covert network behavior in SKILL.md.

Files scanned

301

Lines analyzed

Review items

False positives ignored

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:242-245

Ruby/shell backtick execution

```bash

The block includes git push commands for the main branch and release tag. Pushing to a remote repository is a high-impact release action that requires explicit user approval.

High

SKILL.md:248-250

Ruby/shell backtick execution

```bash

The block includes a twine upload step that can publish release artifacts to PyPI. Publishing packages is an external side effect with supply-chain impact.

Medium

SKILL.md:166-178

Ruby/shell backtick execution

```bash

This command block removes build directories, installs build tooling, builds the package, and force-reinstalls a wheel. These are expected release steps, but they can alter the workspace and Python environment if auto-executed.

Medium

SKILL.md:199-212

Ruby/shell backtick execution

```bash

The block stages all changes, creates a commit, and creates an annotated tag. This can capture unintended files or change repository history if run without review.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/bpsai-releasing-versions/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/bpsai-releasing-versions/security.svg)](https://skillstore.io/skills/bpsai-releasing-versions?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/bpsai-releasing-versions?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/bpsai-releasing-versions/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/bpsai-releasing-versions.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

BPSAI. (2026). releasing-versions security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/bpsai-releasing-versions/audits/10

BibTeX citation

@techreport{bpsai-bpsai-releasing-versions-2026,
  author = {BPSAI},
  title = {releasing-versions security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/bpsai-releasing-versions/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "releasing-versions security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "BPSAI"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/bpsai-releasing-versions/audits/10"
identifiers:
  - type: other
    value: "skillstore:bpsai-releasing-versions:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

協調候選發布版本

執行就緒檢查、識別阻礙因素，並為指定的發布版本準備儲存庫。

準備 Python 套件發布

更新版本檔案、驗證建置，並準備套件成品以供審查。

發布前稽核文件

在最終核准前檢查變更日誌、README、功能矩陣和範本同步狀態。

Try These Prompts

檢查發布就緒狀態

使用 releasing-versions skill 檢查此儲存庫是否已準備好發布版本 X.Y.Z。在進行變更前回報阻礙因素。

準備版本更新

使用此技能準備版本 X.Y.Z。在編輯前顯示每個需要變更版本的檔案。

驗證文件與建置

使用此技能驗證版本 X.Y.Z 的發布文件、範本同步、套件建置輸出和安裝驗證。

建立發布交接

使用此技能為版本 X.Y.Z 產生最終發布交接。包含阻礙因素、警告、成品，以及等待核准的命令。

Best Practices

在編輯版本檔案前執行驗證命令。
在任何 Git 或套件發布步驟前審查差異和產生的成品。
在發布交接中記錄警告和維護者決策。

Avoid

未取得明確的維護者核准前，不要推送標籤或上傳套件。
不要略過失敗的測試、失敗的覆蓋率或偵測到的密鑰。
不要在未審查差異的情況下假設範本差異是安全的。

Frequently Asked Questions

此技能會自動發布套件嗎？

否。它會描述發布命令，並建議在推送或上傳前進行審查。

哪些專案最適合使用此技能？

它適用於 PairCoder 風格的 Python 儲存庫，包含版本檔案、變更日誌、測試和套件建置步驟。

它可以更新變更日誌項目嗎？

可以。它可以根據已封存任務和預期的發布說明章節，引導建立變更日誌。

它可以取代安全掃描嗎？

否。它會指出密鑰和相依性掃描，但維護者必須審查結果。

它可以處理測試失敗嗎？

可以。它會停止發布工作流程，並指示使用者先修復失敗項目再繼續。

它支援自訂發布版面配置嗎？

僅部分支援。自訂路徑或非 Python 封裝可能需要調整命令和檢查。

Developer Details

Author

BPSAI

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/BPSAI/paircoder/tree/main/.claude/skills/releasing-versions

Ref

26421118b848d9f1efc0aa169d8a7a9e7e0a877e

Maintenance freshness

7/18/2026

Usage

7 downloads · 248 views

File structure

📄 SKILL.md

releasing-versions

Install with my Agent

Agent-readable resources

Test it

Security Audit

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

協調候選發布版本

準備 Python 套件發布

發布前稽核文件

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from BPSAI

planning-with-trello

creating-skills

reviewing-code

implementing-with-tdd

managing-task-lifecycle

designing-and-implementing

terraform-skill

release-orchestrator

incident-command-governor

senior-devops

cloud-devops

helm-chart-architect

releasing-versions

Install with my Agent

Agent-readable resources

Test it

Security Audit

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

協調候選發布版本

準備 Python 套件發布

發布前稽核文件

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from BPSAI

planning-with-trello

creating-skills

reviewing-code

implementing-with-tdd

managing-task-lifecycle

designing-and-implementing

Related Skills

terraform-skill

release-orchestrator

incident-command-governor

senior-devops

cloud-devops

helm-chart-architect