changelog-maintenance

changelog-maintenance is a skill for Claude Code, Codex from aj-geddes/useful-ai-prompts. It costs 35 tokens per session (3,279 once invoked), scanned A, original, MIT.

A guide for recording notable project changes in a structured changelog, usually a file that lists what was added, changed, fixed, deprecated, or removed in each release. It follows Keep a Changelog and Semantic Versioning conventions.

In plain words
What is it for?
Use it to write release notes, track features and bug fixes, document security patches, announce deprecations, and prepare migration guidance.
Why use it?
It prevents release history from becoming scattered or unclear. Users and developers can see breaking changes, security fixes, migration needs, and other important updates.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to write release notes, track features and bug fixes, document security patches, announce deprecations, and prepare migration guidance.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/aj-geddes/useful-ai-prompts/changelog-maintenance
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add aj-geddes/useful-ai-prompts --skill changelog-maintenance
Clone the repo
git clone --depth 1 https://github.com/aj-geddes/useful-ai-prompts

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for changelog-maintenance

README.md
[![agentmods](https://agentmods.dev/badge/skills/aj-geddes/useful-ai-prompts/changelog-maintenance/github.svg)](https://agentmods.dev/skills/aj-geddes/useful-ai-prompts/changelog-maintenance)
Your own site
<a href="https://agentmods.dev/skills/aj-geddes/useful-ai-prompts/changelog-maintenance"><img src="https://agentmods.dev/badge/skills/aj-geddes/useful-ai-prompts/changelog-maintenance/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for changelog-maintenance

Your own site · 80×15
<a href="https://agentmods.dev/skills/aj-geddes/useful-ai-prompts/changelog-maintenance"><img src="https://agentmods.dev/badge/skills/aj-geddes/useful-ai-prompts/changelog-maintenance.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 35 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,279 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Socket pass 18 Mar 2026
  • Snyk pass 4 Mar 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00035 $0.03279
Opus 5 $0.00017 $0.01639
Sonnet 5 $0.00007 $0.00656
Haiku 4.5 $0.00003 $0.00328

Measured 13d ago against content hash 2667ae6d8866, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

changelog-maintenance scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/validate-api.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/changelog-maintenance/SKILL.md · 488 lines

How it starts

The opening of the file, as written. The whole thing — 488 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Changelog Maintenance

Overview

Create and maintain structured changelogs that document all notable changes to your project, following industry best practices like Keep a Changelog and Semantic Versioning.

When to Use

  • Version history documentation
  • Release notes generation
  • Breaking changes tracking
  • Migration guide creation
  • Deprecation notices
  • Security patch documentation
  • Feature announcements
  • Bug fix tracking

CHANGELOG.md Template

# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [Unreleased]

### Added

- New feature or capability that has been added
- Can be multiple items

### Changed

- Changes in existing functionality
- Updates to how features work

### Deprecated

- Features that will be removed in upcoming releases
- Include timeline for removal

### Removed

- Features that have been removed
- Previously deprecated features

### Fixed

- Bug fixes
- Security patches

### Security

- Security vulnerabilities that have been fixed
- Important security updates

## [2.1.0] - 2025-01-15

### Added

- Added OAuth2 authentication support for GitHub and Google
- New dashboard widget system for customizable layouts
- Bulk operations API for processing multiple records
- Export to Excel functionality with custom templates
- Dark mode theme support across all pages
- WebSocket support for real-time notifications
- GraphQL API alongside existing REST endpoints
- Internationalization support for 10 new languages
  - Spanish, French, German, Italian, Portuguese
  - Japanese, Korean, Chinese (Simplified/Traditional), Arabic

### Changed

- Updated user profile page with improved layout and performance
- Migrated from REST to GraphQL for main API endpoints
- Improved error messages with more context and suggestions
- Refactored authentication system for better security
- Updated dependencies to latest versions
  - React 18.2.0 → 19.0.0
  - Node.js 16.x → 18.x (minimum required version)
  - PostgreSQL 13 → 14
- Changed default pagination from 20 to 50 items
- Improved search algorithm for 3x faster results

### Deprecated

- REST API v1 endpoints (will be removed in v3.0.0)
  - Use GraphQL API or REST API v2 instead
  - Migration guide: [docs/migration-v1-to-v2.md](docs/migration-v1-to-v2.md)
- Legacy authentication tokens (remove by 2025-06-01)
  - Replace with JWT tokens
- Old configuration format in `config.json`
  - Use new YAML format in `config.yaml`

### Removed

- Removed deprecated `/api/users/list` endpoint
  - Use `/api/v2/users` instead
- Removed support for Internet Explorer 11
  - Minimum browser versions: Chrome 90+, Firefox 88+, Safari 14+, Edge 90+
- Removed jQuery dependency (now pure JavaScript)
- Removed old dashboard widgets (replaced with new widget system)

### Fixed

- Fixed race condition in order processing causing duplicate charges
  - Affected versions: 2.0.0 - 2.0.5
  - Issue: [#1234](https://github.com/user/repo/issues/1234)
- Fixed memory leak in WebSocket connections
- Fixed incorrect timezone handling in date pickers
- Fixed CSV export not including all columns
- Fixed CSRF vulnerability in form submissions (CVE-2025-12345)
- Fixed accessibility issues in navigation menu
  - Now fully keyboard navigable
  - Screen reader friendly
- Fixed mobile responsive issues on iPad Pro
- Fixed SQL injection vulnerability in search (CVE-2025-12346)
  - **Security Impact**: High
  - **Affected Versions**: 2.0.0 - 2.0.9
  - **Recommended Action**: Upgrade immediately

### Security

- **CRITICAL**: Fixed SQL injection in user search (CVE-2025-12346)
  - Impact: Allows unauthorized database access
  - Affected: v2.0.0 to v2.0.9
  - Action: Upgrade to v2.1.0 immediately
- Fixed XSS vulnerability in comment rendering (CVE-2025-12347)
- Updated all dependencies with known security vulnerabilities
- Implemented rate limiting on all API endpoints
- Added CSRF protection to all forms
- Enabled Content Security Policy headers

## [2.0.5] - 2025-01-08

### Fixed

- Hotfix: Critical bug causing data loss in export functionality
- Fixed authentication issues with LDAP integration
- Resolved performance degradation with large datasets

### Security

- Patched authentication bypass vulnerability (CVE-2025-12344)

## [2.0.0] - 2025-01-01

### Added

- Complete UI redesign with modern look and feel
- New REST API v2 with better performance
- User roles and permissions system
- Audit logging for all administrative actions
- Email templates customization
- Two-factor authentication (2FA)
- API rate limiting
- Database backup automation

### Changed

- **BREAKING**: Changed API response format from XML to JSON
  - All API consumers must update their integration
  - See migration guide: [docs/api-v1-to-v2.md](docs/api-v1-to-v2.md)
- **BREAKING**: Renamed database tables for consistency
  - `user` → `users`
  - `order` → `orders`
  - Run migration script: `npm run migrate:v2`
- **BREAKING**: Changed authentication from session-based to JWT
  - Existing sessions will be invalidated
  - Users need to log in again
- Improved database query performance by 50%
- Updated minimum Node.js version to 16.x

### Removed

- **BREAKING**: Removed support for Node.js 12 and 14
- **BREAKING**: Removed deprecated configuration options
  - `USE_OLD_AUTH` - Use JWT authentication
  - `LEGACY_MODE` - No longer supported

### Migration Guide

**From v1.x to v2.0:**

1. Update Node.js to version 16 or higher
2. Update your API integration:

   ```javascript
   // Old (v1)
   fetch("/api/users/list")
     .then((res) => res.text())
     .then((xml) => parseXML(xml));

Read the full file on GitHub · 488 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 13d ago First seen · 488 lines · 35 tokens per session scan A 2667ae6d8866

Subscribe to this mod's changes

changelog-maintenance is a skill published in the GitHub repository aj-geddes/useful-ai-prompts (338 stars, last pushed 6mo ago), licensed MIT. It adds 35 tokens to every session and 3,279 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.