release-workflow SKILL.md skillA
release-workflow from cat-xierluo/legal-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add cat-xierluo/legal-skills/release-workflow@v1.6.8Pins v1.6.8 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- cat-xierluo/legal-skills
- Path
skills/release-workflow/SKILL.md- Versions recorded
- 5
- Latest version
- v1.6.8, committed Oct 30, 2026
- First version recorded
- Oct 27, 2026
- Size
- 25,910 bytes
- Repository stars
- 775
- License
- none declared
本技能应在 GitHub 项目发布新版本时使用，覆盖版本号管理、CHANGELOG 同步、Release Notes 撰写、tag 创建、CI 构建监控、发布验证和历史清理全流程。适用于桌面应用、CLI 工具、Web 应用、库/SDK 等任何基于 GitHub 的软件项目。当用户提到"发布"、"release"、"打 tag"、"新版本"、"更新版本号"、"写 release notes"、"发布失败了"、"CI 挂了"、"Actions 配额告急"、"短时间内多次发版"、"monorepo"、"批量打包"、"多 skill 发布"、"skill zip"、"专家套件 zip"时触发。也用于拒绝把 release 当作 CI 验证机制（"打 tag 看一下"）的反模式场景。不要用于非 GitHub 项目（如纯 GitLab / Gitea 项目）或无需 CI 的手动发布场景。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Release Workflow 软件项目的全流程发布工作流。适用于 GitHub 上的任何类型项目。 ## 适用场景 GitHub 项目的完整发布周期：从版本号确定到 CI 构建验证。CI 故障排查（`references/ci-troubleshooting.md`）和特定项目类型指南（`references/` 下各文档）作为发布流程的补充参考。 **与 git-workflow 的职责边界**：本技能只负责发版流程内的 CI 构建监控（第 4 步）与发布成本约束（配额红灯）。日常 Actions 配额治理——CI 分钟耗尽停挂止血、workflow 停挂/恢复、workflow_dispatch 化、仓级总闸——由 `git-workflow` §11 负责。发版中出现 CI 故障：构建产物/签名/发布链路问题读本技能；账号级配额治理问题转 git-workflow。 ## 项目配置 `config/projects.yaml` 集中管理各项目的发布配置（仓库、平台、自动更新、排除产物等）。发布时先读取对应项目配置，按配置决定构建矩阵和预期产物。模板见 `config/projects.example.yaml`。 带应用内更新的桌面项目，还必须读取 [真实升级与热修门禁](references/updater-hotfix.md)：验签、旧客户端能力、进程回收、数据恢复和实际安装路径分别验收。 ## 发布前检查 | 检查项 | 说明 | |--------|------| | 工作区干净 | `git status` 无未提交变更 | | 版本号一致 | 所有版本号文件（package.json / Cargo.toml / pyproject.toml 等）与 CHANGELOG.md 最新条目一致 | | CHANGELOG 已更新 | 包含目标版本的结构化条目 | | CI 工作流存在 | `.github/workflows/` 中有 release 相关工作流且 tag 触发配置正确 | | 本地测试门禁 | `npm test`（或项目对应单测命令）整体通过。**单条失败先重跑确认是否偶发**再定性：偶发 flaky（非本次改动引入的回归）修测试或单独跟进，不要因此阻塞发布；但若全量多次复现、指向真实回归，必须先修复再发版 | 任一条件不满足，先修复再继续。 ## ⚠️ Release ≠ 测试 — 强制约束 **打 tag / 创建 GitHub Release 是把版本号给真实用户**，不是 CI 验证机制。**把 release workflow 当作"看 CI 跑没跑通"或"我下载个 artifact 自己测一下"是反模式，必须禁止。** ### 为什么是绝对规则 …
Read the whole file at its exact version.
How to install
mdr add cat-xierluo/legal-skills/release-workflow@sha256:650c24b7e9af98a8The line at the top of this page pins the label v1.6.8, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_a44t5q5x5thutier)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Oct 27, 2026 and Oct 30, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.6.8 latest | 2026-10-30 | 9700896 | 25,910 B | A | view · diff |
| v1.6.7 | 2026-10-29 | a4e5452 | 25,910 B | A | view · diff |
| v1.6.6 | 2026-10-29 | bc3b31b | 25,910 B | A | view · diff |
| v1.6.5 | 2026-10-29 | dad6506 | 25,910 B | A | view · diff |
| v1.6.4 | 2026-10-27 | f137dc5 | 25,910 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (25910 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cat-xierluo/legal-skills · 775 stars · license none declared · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_a44t5q5x5thutier GET https://markdownregistry.com/api/v1/resolve?ref=cat-xierluo/legal-skills/release-workflow GET https://markdownregistry.com/api/v1/blob/650c24b7e9af98a8e2a26f792d1ade013b0b5425babcf2af49367e12d20de0af
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from cat-xierluo/legal-skills
Every file in cat-xierluo/legal-skills