Agent skill · Audited from source

Changelog Gen

skill · laolaoshiren/claude-code-skills-zhMIT licenceAudited 19 Oct 2026 · source 7d69626375c6

★ 894pushed today
✓SAFEGrade B · 89/100 · 19 Oct 2026 · 7d69626
894repo stars · whole laolaoshiren/claude-code-skills-zh

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7d69626375c6 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Changelog 生成器 - 从 Git 历史自动生成 CHANGELOG

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Changelog Gen (laolaoshiren/claude-code-skills-zh)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/laolaoshiren/changelog-gen

Trust audit

Audit 0.4.1 · source read 19 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 7d69626375c6 · 19 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherlaolaoshiren GitHub userOwner of the repository this skill is read from
  • Source folderlaolaoshiren/claude-code-skills-zh/skills/changelog-genThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict7d69626375c6A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Changelog 生成器 - 从 Git 历史自动生成 CHANGELOG

---
name: changelog-gen
description: Changelog 生成器 - 从 Git 历史自动生成 CHANGELOG
---

# Changelog 自动生成

## 触发条件
当用户要求生成 changelog、更新日志、版本记录、release notes 时激活此技能。

## 工作流程

### 第 1 步:获取 Git 历史
```bash
# 先获取最近的 tag,再用 revision range 查询
git describe --tags --abbrev=0
git log --oneline <last-tag>..HEAD

# 或指定范围
git log --oneline v1.0.0..HEAD

# 仓库没有 tag 时,明确选择起始提交或查看全部历史
git log --oneline
```

### 第 2 步:分类提交
按 Conventional Commits 分类:

| 分类 | Type 标识 | 图标 |
|------|----------|------|
| 新功能 | `feat` | ✨ |
| Bug 修复 | `fix` | 🐛 |
| 文档 | `docs` | 📝 |
| 重构 | `refactor` | ♻️ |
| 性能优化 | `perf` | ⚡ |
| 测试 | `test` | 🧪 |
| 构建/工具 | `chore` | 🔧 |
| Breaking Changes | 含 `BREAKING CHANGE:` 或 `!` | ⚠️ |
| 安全修复 | `fix(security)` 或含 CVE | 🔒 |
| 依赖更新 | `deps` 或 `chore(deps)` | 📦 |

### 第 3 步:版本号确定策略

遵循 Semantic Versioning 规则:

| 变更类型 | 版本变化 | 示例 |
|---------|---------|------|
| Breaking Changes | 主版本 +1 | 1.2.0 → 2.0.0 |
| 新功能 (feat) | 次版本 +1 | 1.2.0 → 1.3.0 |
| Bug 修复 (fix) | 修订版本 +1 | 1.2.0 → 1.2.1 |
| 安全修复 (fix(security)) | 修订版本 +1(紧急发布) | 1.2.0 → 1.2.1 |

**判断依据**:
- 提交信息含 `BREAKING CHANGE:` 或 type 后加 `!`(如 `feat!:`)→ 主版本
- 存在 `feat` 提交 → 次版本
- 仅 `fix`/`docs`/`chore` 等 → 修订版本

### 第 4 步:生成 CHANGELOG

## 输出格式

```markdown
# Changelog

## [1.3.0] - 2026-06-17

### ⚠️ Breaking Changes
- 移除废弃的 `/api/v1/users` 端点,统一使用 `/api/v2/users` (#130)

### ✨ 新功能
- 新增用户认证模块 (#123)
- 支持 OAuth2 登录 (#124)
- 新增批量导出功能 (#128)

### 🔒 安全修复
- 升级 lodash 修复原型污染漏洞 CVE-2025-XXXX (#129)

### 🐛 Bug 修复
- 修复分页查询偏移量错误 (#125)
- 修复并发写入导致的数据竞争 (#127)

### ⚡ 性能优化
- 优化大列表渲染性能,减少 50% 内存占用 (#126)

### 📝 文档
- 更新 API 文档 (#131)

### 📦 依赖更新
- 升级 axios 1.6.0 → 1.7.0 (#132)
```

## 注意事项
- Breaking Changes 必须放在最前面,加粗突出显示
- 每条记录关联 Issue/PR 编号,便于追溯
- 安全修复需注明 CVE 编号(如有)
- 版本号应与 git tag 保持一致
- 如果是预发布版本,使用 `-beta.1`、`-rc.1` 后缀
- 可维护一个 `CHANGELOG.md` 文件,每次 release 追加到顶部

Excerpt, first 1,836 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 7d69626

Download folder ↗
git clone https://github.com/laolaoshiren/claude-code-skills-zh
git -C claude-code-skills-zh checkout 7d69626375c6

The author documents no install command, so this uses the repository directly. Our verdict covers commit 7d69626375c6 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 7d69626375c6

Questions about Changelog Gen

What does the Changelog Gen skill do?
面向中文开发者的 Claude Code Skills / Agents / Plugins 精选与原创技能库|按场景分类|复制即装|持续更新
Is Changelog Gen safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Changelog Gen access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (7d69626375c6), read on 2026-10-19. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.