Changelog Scan Skill
Scan merged PRs and commits to categorize changes and produce a structured draft for release notes.
The skill only reads git history and produces a draft, with no network exfiltration or file writes, exercising least privilege; clearly requires explicit human approval before publishing or tagging, aligning with safety. However, it does not mention sensitive-data handling, dependency security, or rollback, and data-flow transparency is limited. Repo has SECURITY.md but skill does not reference it.
Steps are mostly self-consistent with concrete git commands, but no error handling or abnormal-input feedback; on failure no clear explanation. Depends on git but no install/dependency notes in skill. Static review cannot verify execution, capped below static maximum.
Targets changelog drafting clearly, but lacks declared non-fit boundaries or edge cases; user-invocable but precise trigger conditions not specified. Environment fit unknown, no Chinese support or overseas dependency noted, mainland availability unverified.
Clear front matter and categories, structured; but lacks install/dependency notes, examples, FAQ, known limitations, versioning, changelog, and maintenance responsibility. MIT license clear but not referenced in skill file.
Produces categorized draft and updates state file, but no output format spec or example, cannot confirm direct usability. Comparative benefit vs manual not stated; static cannot verify actual results.
Only SKILL.md and repo-level CI; no tests specific to this skill or third-party execution evidence. Repo has CI workflows but not covering this skill. Static assessment limits evidence.
- No guidance on handling sensitive info (e.g., secrets in PRs) which could leak into drafts.
- No error handling; failures in git commands or missing tags lack clear diagnostics.
- No installation/dependency notes, may hinder actual use.
- Lacks versioning, changelog, and maintenance responsibility disclosure, affecting long-term maintainability.
- Repo may depend on overseas services, but skill has no network dependency; mainland accessibility unverified.
What does this skill do, and when should you use it?
This skill automatically scans merged PRs and commits since a given reference, extracting titles, labels, types, and signals. It categorizes changes into features, bug fixes, documentation, dependencies, breaking changes, and security. The output is a categorized draft release note saved to RELEASE_NOTES_DRAFT.md, plus a state file update. Designed to be draft-only (L1 level), it will not create PRs, releases, or tags without explicit human approval.
Runs git log --merges --oneline <last-tag>..HEAD to fetch merged commits. Collects PR labels, milestones, and commit messages. Categorizes changes into predefined categories. Writes RELEASE_NOTES_DRAFT.md with the categorized draft, and updates changelog-drafter-state.md with the scan window. Ensures breaking changes and security items are surfaced explicitly.
- A maintainer wants a quick summary of recent merged changes before a release.
- A developer needs to automatically build a draft release note based on git history since the last tag.
- A team wants release notes organized by category (features, bug fixes, etc.) to streamline release announcements.
- A maintainer prepares a draft for a weekly release and tracks the scan window for review.
What are this skill's strengths and limitations?
- Automates extraction of merged PRs and commits, reducing manual effort.
- Provides structured output with standard categories, making it easy to organize.
- Designed as a safe L1 draft, it never publishes or tags automatically.
- Updates a state file to track the scan window, aiding review.
- No specifics on how PR labels or milestones are accessed (only described, not commands).
- No documented test suite or validated agent platform (except OpenCode as an example).
- The example is for OpenCode; other agents may need adjustments.
- Unclear how to handle repositories without labels or milestones; relies on commit messages which may be inconsistent.
How do you install this skill?
Clone or copy the repository into your environment and place the skill folder (starters/changelog-drafter-opencode/skills/changelog-scan/) in your agent's skills directory. For this mono-repo, refer to the README for installation of the whole collection; no separate installation instructions are provided for this specific skill.
How do you use this skill?
Invoke the skill in your agent, specifying the last tag (e.g., 'scan changelog from v1.2.0'). The skill will run git commands and produce a draft. The draft will be in RELEASE_NOTES_DRAFT.md; review and refine manually. It will not tag or create PRs without explicit approval.