Agent skill · Audited from source
Changelog Gen
skill · laolaoshiren/claude-code-skills-zhMIT licenceAudited 19 Oct 2026 · source 7d69626375c6
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7d69626375c6 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Changelog 生成器 - 从 Git 历史自动生成 CHANGELOG
Cite
Cite this page
ModelsAtlas. “Changelog Gen (laolaoshiren/claude-code-skills-zh)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/laolaoshiren/changelog-gen
Trust audit
Audit 0.4.1 · source read 19 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 7d69626375c6 · 19 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherlaolaoshiren GitHub userOwner of the repository this skill is read from
- Source folderlaolaoshiren/claude-code-skills-zh/skills/changelog-genThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict7d69626375c6A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Changelog 生成器 - 从 Git 历史自动生成 CHANGELOG
--- name: changelog-gen description: Changelog 生成器 - 从 Git 历史自动生成 CHANGELOG --- # Changelog 自动生成 ## 触发条件 当用户要求生成 changelog、更新日志、版本记录、release notes 时激活此技能。 ## 工作流程 ### 第 1 步:获取 Git 历史 ```bash # 先获取最近的 tag,再用 revision range 查询 git describe --tags --abbrev=0 git log --oneline <last-tag>..HEAD # 或指定范围 git log --oneline v1.0.0..HEAD # 仓库没有 tag 时,明确选择起始提交或查看全部历史 git log --oneline ``` ### 第 2 步:分类提交 按 Conventional Commits 分类: | 分类 | Type 标识 | 图标 | |------|----------|------| | 新功能 | `feat` | ✨ | | Bug 修复 | `fix` | 🐛 | | 文档 | `docs` | 📝 | | 重构 | `refactor` | ♻️ | | 性能优化 | `perf` | ⚡ | | 测试 | `test` | 🧪 | | 构建/工具 | `chore` | 🔧 | | Breaking Changes | 含 `BREAKING CHANGE:` 或 `!` | ⚠️ | | 安全修复 | `fix(security)` 或含 CVE | 🔒 | | 依赖更新 | `deps` 或 `chore(deps)` | 📦 | ### 第 3 步:版本号确定策略 遵循 Semantic Versioning 规则: | 变更类型 | 版本变化 | 示例 | |---------|---------|------| | Breaking Changes | 主版本 +1 | 1.2.0 → 2.0.0 | | 新功能 (feat) | 次版本 +1 | 1.2.0 → 1.3.0 | | Bug 修复 (fix) | 修订版本 +1 | 1.2.0 → 1.2.1 | | 安全修复 (fix(security)) | 修订版本 +1(紧急发布) | 1.2.0 → 1.2.1 | **判断依据**: - 提交信息含 `BREAKING CHANGE:` 或 type 后加 `!`(如 `feat!:`)→ 主版本 - 存在 `feat` 提交 → 次版本 - 仅 `fix`/`docs`/`chore` 等 → 修订版本 ### 第 4 步:生成 CHANGELOG ## 输出格式 ```markdown # Changelog ## [1.3.0] - 2026-06-17 ### ⚠️ Breaking Changes - 移除废弃的 `/api/v1/users` 端点,统一使用 `/api/v2/users` (#130) ### ✨ 新功能 - 新增用户认证模块 (#123) - 支持 OAuth2 登录 (#124) - 新增批量导出功能 (#128) ### 🔒 安全修复 - 升级 lodash 修复原型污染漏洞 CVE-2025-XXXX (#129) ### 🐛 Bug 修复 - 修复分页查询偏移量错误 (#125) - 修复并发写入导致的数据竞争 (#127) ### ⚡ 性能优化 - 优化大列表渲染性能,减少 50% 内存占用 (#126) ### 📝 文档 - 更新 API 文档 (#131) ### 📦 依赖更新 - 升级 axios 1.6.0 → 1.7.0 (#132) ``` ## 注意事项 - Breaking Changes 必须放在最前面,加粗突出显示 - 每条记录关联 Issue/PR 编号,便于追溯 - 安全修复需注明 CVE 编号(如有) - 版本号应与 git tag 保持一致 - 如果是预发布版本,使用 `-beta.1`、`-rc.1` 后缀 - 可维护一个 `CHANGELOG.md` 文件,每次 release 追加到顶部
Excerpt, first 1,836 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 7d69626
git clone https://github.com/laolaoshiren/claude-code-skills-zh git -C claude-code-skills-zh checkout 7d69626375c6
The author documents no install command, so this uses the repository directly. Our verdict covers commit 7d69626375c6 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
7d69626375c6
Similar skills
All coding & review skills →laolaoshiren/claude-code-skills-zh
依据真实 OpenAPI、路由实现和现有测试生成并验证 API 测试。用于用户要求测试接口、补集成测试、验证 API 契约、生成回归用例或排查接口兼容性时;区分“生成测试”和“执行请求”的授权,不猜测状态码、响应结构或 SLA,不在未确认环境中发送写请求。
laolaoshiren/claude-code-skills-zh
数据库迁移助手 - Schema 对比、迁移脚本生成
laolaoshiren/claude-code-skills-zh
审计 Node.js、Python、Go、Rust、JVM、Ruby 项目的依赖漏洞、版本健康度与许可证事实;当用户要求检查 package.json、lockfile、requirements、go.mod、Cargo.toml、pom.xml、Gemfile.lock,或生成不改依赖的中文审计报告时使用
laolaoshiren/claude-code-skills-zh
项目目录结构地图 - 生成带说明的可视化目录树,快速理解任意代码库
laolaoshiren/claude-code-skills-zh
环境变量管理器:扫描、校验、同步 .env 文件,生成安全配置模板
laolaoshiren/claude-code-skills-zh
编程错误消息翻译专家 — 将英文错误消息翻译成中文,解释原因并提供修复方案
Questions about Changelog Gen
What does the Changelog Gen skill do?
Is Changelog Gen safe to install?
What can Changelog Gen access on my machine?
How current is this page?
Sources
- github.com/laolaoshiren/claude-code-skills-zh/tree/main/skills/c — the audited source at commit 7d69626375c6 and every finding aboveObserved · 19 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Changelog Gen skill do?
- Is Changelog Gen safe to install?
- What can Changelog Gen access on my machine?