verify-releases

verify-releases is a Release cutting & versioning skill for AI agents, published by dotnet in the core repository on GitHub. Skillspace rates verify-releases F (45/100) and the safety scan rated it risky; the rating is based on static analysis only.

Validate releases and release links: URL liveness, file hashes, CDN latest.version files, and aka.ms redirect targets. Uses release-notes verify and generate commands against the local release-notes directory. USE FOR: validate the latest release, validate release links, validating that all download links return HTTP 200, verifying SHA512 hashes match downloaded content, checking CDN latest.version files match releases.json, checking aka.ms redirects point to the correct download URLs, regenerating releases-index.json and releases.md after source data changes. DO NOT USE FOR: editing releases.json or release.json (edit source data directly), graph regeneration (use update-release-graph skill), supported-os changes (use update-supported-os skill).

Grade
F
Quality
45 / 100
Safety
Risky
GitHub stars
22,009

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since.

View source on GitHubdotnet/core

Our review

Architecture
84 / 100
Maturity
Structured: ships references or scripts
Security scan
High-risk patterns
License
MIT
Adoption
Adopted by 2 other repositories, in 0 collections

What the scanner flagged

  • references sensitive credential env
  • mentions secrets in text

Not checked yet

  • Category is a classifier prediction; no model has read this skill yet
  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Release cutting & versioning

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.