Agent skill · Audited from source
Release
skill · schpet/linear-cliISC licenceAudited 21 Oct 2026 · source b002c4677a31
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit b002c4677a31 and found no filesystem, network or shell access and no hard-coded secrets. What it does: This skill should be used when the user asks to "make a release", "create a release", "cut a release", "release a new version", "publish a release", or mentions preparing for release. Provides comprehensive workflow for…
Cite
Cite this page
ModelsAtlas. “Release (schpet/linear-cli)”. Retrieved 21 Oct 2026. https://modelsatlas.com/skills/schpet/release
11 skills are called “Release”. You are viewing schpet/linear-cli. 1 of them is BLOCK.
- schpet/linear-cli★ 1k✓SAFE
- paperclipai/paperclip★ 81k!CAUTION
- tobi/qmd★ 31k✕BLOCK
- max-sixty/worktrunk★ 9.3k✓SAFE
- BlockRunAI/ClawRouter★ 6.6k✓SAFE
and 6 more with this name.
Trust audit
Audit 0.4.1 · source read 21 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (1)
LOWInventory / provenanceinv.symlink · CLAUDE.md
CLAUDE.md
- Why
- link not followed
- Fix
- —
Audit 0.4.1 · source sha b002c4677a31 · 21 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherschpet GitHub userOwner of the repository this skill is read from
- Source folderschpet/linear-cli/.claude/skills/releaseThe exact folder we audited
- LicenceISCAs the repository states it
- Commit pinned for this verdictb002c4677a31A new audit runs when the source changes
- Repository statusNot archivedLast push 13 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: This skill should be used when the user asks to "make a release", "create a release", "cut a release", "release a new version", "publish a release", or mentions preparing for release. Provides comprehensive workflow for…
--- name: Release description: This skill should be used when the user asks to "make a release", "create a release", "cut a release", "release a new version", "publish a release", or mentions preparing for release. Provides comprehensive workflow for reviewing changes, updating changelog, determining semver bump, and publishing. version: 0.1.0 --- # Release Workflow This skill provides a systematic workflow for creating and publishing releases for the linear-cli project. It handles changelog management, version bumping, testing, and tagging. ## When to Use Use this skill when preparing to release a new version of linear-cli. The workflow ensures all changes are documented, tests pass, and versions are properly tagged before publishing. ## Prerequisites Ensure the following tools are available: - `changelog` skill for changelog management - `svbump` for version bumping (installed) - `jj` for version control operations - `just` for running the release tasks - `jq` for updating the Claude Code plugin versions ## Release Workflow ### Step 1: Review Commits Since Last Release Determine the commits that have been made since the last release: ```bash jj log --ignore-working-copy --git -r 'tags()..@' --no-graph ``` This shows all commits from the most recent tag to the current commit. ### Step 2: Add Changelog Entries For each commit identified above, evaluate whether it warrants a changelog entry. Focus on user-facing changes: **Include in changelog:** - New features - Bug fixes - Breaking changes - Significant improvements - Deprecations **Exclude from changelog:** - Internal refactoring without user impact - Documentation-only changes - Build/CI configuration changes - Chore commits (unless significant) Use the changelog CLI to add entries. Use `--attribute-pr` with the commit SHA to automatically look up the associated PR and add attribution, excluding `schpet` and `schpetbot`: ```bash changelog add --type <type> "<description>" --attribute-pr <commit-sha> --exclude-users schpet,schpetbot ``` Omit `--attribute-pr` for commits without an associated PR or when attribution isn't relevant. Types match Keep a Changelog categories: - `added` - New features - `changed` - Changes in existing functionality - `deprecated` - Soon-to-be removed features - `removed` - Removed features - `fixed` - Bug fixes - `security` - Security improvements ### Step 3: Verify Changelog with User After adding all relevant changelog entries, show the unreleased section of CHANGELOG.md to the user and ask them to review it: 1. Read the CHANGELOG.md file 2. Show the `[Unreleased]` section 3. Ask: "Please review these changelog entries. Are there any changes needed before release?" 4. Make any requested adjustments ### Step 4: Determine Semver Bump Based on the types of changes in the changelog, determine and recommend the appropriate semantic version bump: **Major (X.0.0):** - Breaking changes - Removed features - Significant API changes **Minor (0.X.0):** - New features (added) - Deprecations - Backward-compatible functionality additions **Patch (0.0.X):** - Bug fixes - Security fixes - Minor improvements with no new features Present the recommendation to the user: ``` Based on the changelog entries, I recommend a <MAJOR/MINOR/PATCH> version bump because: - [reason 1] - [reason 2] Current version: <current> Proposed version: <proposed> Should I proceed with this version bump? ``` Wait for user confirmation before proceeding. ### Step 5: Run Changelog Release Once the user confirms the version bump, run the changelog release command with the appropriate semver level: ```bash changelog release <major|minor|patch> ``` This updates CHANGELOG.md, converting the Unreleased section to a versioned release. ### Step 6: Execute Tag Process After the changelog is released, run the tag recipe: ```bash just tag ``` It does the whole release in order, stopping at the first failure: 1. **Quality checks** (`just check`): `cargo fmt --all --check`, `cargo clippy --locked --workspace --all-targets -- -D warnings`, and `cargo test --locked --workspace` 2. **Version bump:** writes the latest changelog version to `workspace.package.version` in `Cargo.toml` with `svbump`, then refreshes `Cargo.lock` with `cargo update --workspace` 3. **Skill docs** (`just skill-docs`): regenerates `skills/linear-cli/SKILL.md` and its references from the CLI's help 4. **Plugin versions** (`just plugin-version`): sets `version` in `.claude-plugin/plugin.json` and both `version` and `plugins[0].version` in `.claude-plugin/marketplace.json` 5. **Commit and tag:** `jj commit -m "chore: Release linear-cli version <version>"`, then moves the `main` bookmark and sets the `v<version>` tag on that commit (`@-`) 6. **Push:** `jj git push --bookmark main`, then `git push origin --tags` When it finishes it prints `released v<version>`. ## Error Handling If any step fails: - **Quality checks fail:** Fix the issues before continuing. Do not proceed with release if tests fail or linting errors exist. - **Version bump fails:** Verify the version format and files exist. - **Push fails:** Check authentication and remote access. Always stop and report errors clearly. Never continue the release process if a critical step fails. ## Important Notes - The justfile `tag` recipe runs every step above; there is no need to run them by hand - Use `jj` for all version control operations (per the project AGENTS.md) - Always use `--ignore-working-copy` for read-only jj operations - The workflow creates a commit on the parent (@-) and then creates a new working commit - Both `jj git push` and `git push origin --tags` are needed (jj for bookmark, git for tags) ## Post-Release After successful release: 1. Verify the tag appears on GitHub 2. Check that the GitHub Actions release workflow (`.github/workflows/release.yml`) builds the binaries and publishes the Homebrew formula and npm package 3. Confirm the new version is published ## Refe
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit b002c46
git clone https://github.com/schpet/linear-cli git -C linear-cli checkout b002c4677a31
The author documents no install command, so this uses the repository directly. Our verdict covers commit b002c4677a31 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
b002c4677a31
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/schpet/release/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
schpet/linear-cli
Manage Linear issues from the command line using the linear cli. This skill allows automating linear management.
n8n-io/n8n
Reproduce a bug from a Linear ticket with a failing test. Expects the full ticket context (title, description, comments) to be provided as input.
n8n-io/n8n
Creates GitHub pull requests with properly formatted titles that pass the check-pr-title CI validation. Use when creating PRs, submitting changes for review, or when the user says /pr or asks to create a pull request.
google-gemini/gemini-cli
Use this skill when asked to review text and user-facing strings within the codebase. It ensures that these strings follow rules on clarity, usefulness, brevity and style.
google-gemini/gemini-cli
Use this skill during code reviews to proactively investigate the codebase for duplicated functionality, reinvented wheels, or failure to reuse existing project best practices and shared utilities.
google-gemini/gemini-cli
An open-source AI agent that brings the power of Gemini directly into your terminal.
Add this badge to your README
[](https://modelsatlas.com/skills/schpet/release/)
<a href="https://modelsatlas.com/skills/schpet/release/"><img src="https://modelsatlas.com/skills/schpet/release/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about Release
What does the Release skill do?
Is Release safe to install?
What can Release access on my machine?
Which assistants does Release work with?
How current is this page?
Sources
- github.com/schpet/linear-cli/tree/main/.claude/skills/release — the audited source at commit b002c4677a31 and every finding aboveObserved · 21 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Release skill do?
- Is Release safe to install?
- What can Release access on my machine?