kitaru-release
kitaru-release is a Release cutting & versioning skill for AI agents, published by zenml-io in the kitaru repository on GitHub. Skillspace rates kitaru-release F (15/100) and the safety scan rated it unsafe; the rating is based on static analysis only.
Unsafe. This skill has patterns associated with malicious or dangerous behaviour. We do not recommend running it.
Guide the Kitaru release process end-to-end — diff develop against the last tag, classify commits (src / docs content / docs infra / release infra), filter docs-infra-only PRs out of the Python library CHANGELOG, remember that marketing-site work now lives in sibling zenml-io-v2, check zenml-io/zenml-frontend-monorepo for the latest stable kitaru-ui-v* release that will be bundled into the Python package and then copied into the Docker image, suggest a version bump, update CHANGELOG.md, run the smoke test, trigger the release workflow via gh, and rewrite the auto-generated GitHub Release notes into structured Highlights / Added / Changed / Fixed / Infrastructure sections. Interactive — pauses for user confirmation at version choice, CHANGELOG diff, smoke-test result, and release-notes draft. Use when the user invokes /kitaru-release, or says "cut a release", "make a release", "release kitaru", "new kitaru version", "ship a release", "prepare a release", "what would be in the next…
- Grade
- F
- Quality
- 15 / 100
- Safety
- Unsafe
- GitHub stars
- 208
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 61 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- Critical-risk patterns
- License
- Apache-2.0
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- destructive rm -rf on home/root
- references sensitive credential env
- mentions secrets in text
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.