What problem does it solve? Releasing npm packages involves many error-prone steps — version bumps, changelogs, security checks, publishing, tagging — and skipping any of them can ship vulnerable or broken artifacts. This Skill drives the entire release through one guided checklist so nothing is missed. ## Core Features & Use Cases - Shape-aware release flow: Auto-detects single-package vs. monorepo projects (via lockfiles and workspace metadata) and loads the matching mechanics, including dependency-ordered monorepo publishing. - Mandatory security audit: Runs dependency audits and secret scans (e.g. gitleaks) before any release-mutating change, blocking the release on vulnerabilities or leaked credentials. - Commit-derived release notes with human review: Generates grouped changelog drafts from conventional commits and pauses for mandatory manual approval before proceeding. - User-owned publish actions: Prints exact publish, push, tag, and GitHub release commands for the user to run, keeping credentials and OTP out of the agent session. - Use Case: You maintain a pnpm monorepo and ask to "cut a release". The Skill confirms the shape, audits dependencies, drafts notes from commits since the last tag, bumps all manifests to one version, runs readiness checks, commits locally, then hands you the exact publish and tag commands. ## Quick Start Ask the assistant to cut a new release of this repository at version 1.4.0 and follow the guided checklist.
