Borrowing it
Nothing to install: this file belongs to u9401066/med-paper-assistant. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/u9401066/med-paper-assistant/master/.claude/skills/changelog-updater/SKILL.mdgit clone --depth 1 https://github.com/u9401066/med-paper-assistantWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/u9401066/med-paper-assistant/changelog-updater)<a href="https://agentmods.dev/skills/u9401066/med-paper-assistant/changelog-updater"><img src="https://agentmods.dev/badge/skills/u9401066/med-paper-assistant/changelog-updater/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/u9401066/med-paper-assistant/changelog-updater"><img src="https://agentmods.dev/badge/skills/u9401066/med-paper-assistant/changelog-updater.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.00303 |
| Opus 5 | $0.00015 | $0.00151 |
| Sonnet 5 | $0.00006 | $0.00061 |
| Haiku 4.5 | $0.00003 | $0.00030 |
Grade A, and why
changelog-updater scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
CHANGELOG 更新技能
觸發：更新 changelog、發布、新版本、被 git-precommit 自動調用
工具：read_file("CHANGELOG.md")、replace_string_in_file、get_changed_files
格式（Keep a Changelog）
## [Unreleased] → ### Added/Changed/Deprecated/Removed/Fixed/Security
分類規則
| 類型 | 關鍵字 |
|---|---|
| Added | feat, 新增, add |
| Changed | change, update, 變更 |
| Deprecated | deprecate, 棄用 |
| Removed | remove, delete, 移除 |
| Fixed | fix, bug, 修復 |
| Security | security, 安全 |
版本號（SemVer）
MAJOR：Breaking Changes | MINOR：新功能（向下相容）| PATCH：Bug 修復
工作流
read_file("CHANGELOG.md")+get_changed_files()- 分類：新檔案→Added、修改→Changed/Fixed、刪除→Removed
- 更新
[Unreleased]區塊
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 38 lines · 29 tokens per session scan A f8a59bda9230
changelog-updater is a skill published in the GitHub repository u9401066/med-paper-assistant (12 stars, last pushed 11d ago), licensed Apache-2.0. It adds 29 tokens to every session and 303 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
release-and-changelog
Use when cutting a release, bumping a version, or writing release notes. Activate for keywords like "release", "version bump", "changelog", "release notes", "tag", "publish", "ship a release", "v1.x", "v2.x". Enforces version hygiene: SemVer respect, changelog discipline, atomic commits, tagged release. Always reflect…
nav-release
Validate and release Navigator plugin to marketplace. Auto-invoke when user says "release plugin", "publish navigator", "create release", or "deploy new version".
omh-deploy-and-monitor
This is a Hermes-native deploy-and-monitor workflow skill.
release-and-publish
Ship a release end-to-end across every registry the project targets (npm, MCP Registry, GitHub Releases for .mcpb bundles, GHCR). Runs the final verification gate, fast-forwards main when the release rode a release PR, creates the annotated tag on the commit main now points at, pushes commits and tags, then publishes…
release
Release a new version of the DevoxxGenie IntelliJ plugin — prompt for the target version, bump it in the build files, write a curated CHANGELOG.md entry and plugin.xml change-notes from the git/PR history since the last tag, build to verify, then commit, tag, and publish a matching GitHub release. Use this whenever…
release-pr-review
Review pass on an open release PR (release/ → main) — the step between git-wrapup and release-and-publish when a project releases in gated release PR mode. Reads the PR's commit range through the code-simplifier lens plus a correctness review, verifies whatever an automated reviewer left on the PR, lands fixes as…