← Back to Skills Marketplace
femto

New Tag

by femto · GitHub ↗ · v0.1.1 · MIT-0
cross-platform ⚠ suspicious
284
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install new-tag
Description
Prepare and publish a git release tag by inspecting the repo's release convention, bumping affected package versions, validating release builds, committing t...
Usage Guidance
This skill is coherent in purpose (preparing and pushing a release tag) but has two practical gaps you should be aware of before installing: (1) the SKILL.md assumes tools that the metadata does not declare (git, pnpm or another package manager, rg), so confirm your agent environment actually has those binaries; (2) the agent will run repository build/release scripts and perform git push/tag operations using whatever credentials the runtime provides — these actions can execute arbitrary code from the repo and modify remote state. If you plan to use it, require explicit confirmation before any push/tag, test in a dry-run branch, ensure CI publishes are correctly configured (and that no npm tokens are exposed to the agent), and limit the agent's git credentials to a least-privilege account. If you need certainty about which binaries or credentials are required, ask the skill author to update the metadata to list required binaries and any environment variables or tokens it may use.
Capability Analysis
Type: OpenClaw Skill Name: new-tag Version: 0.1.1 The skill bundle is designed to automate the standard software release process, including version bumping, build validation, and git tagging. The instructions in SKILL.md and the command patterns provided are consistent with legitimate development workflows using git and pnpm, with no evidence of data exfiltration, malicious execution, or prompt injection.
Capability Assessment
Purpose & Capability
Name/description and the SKILL.md align: the skill is clearly a git-release/tag helper. However the metadata lists no required binaries or env vars while the instructions explicitly assume tools like git, pnpm (or another package manager), ripgrep (rg), and standard Unix utilities (head, etc.). This omission is a mismatch between declared requirements and what the skill actually needs to run.
Instruction Scope
The instructions tell the agent to inspect the repo, update manifests, run build and release scripts (pnpm build / pnpm run), commit, and push branches and annotated tags. Running repository build/release scripts means arbitrary code checked into the repo will execute on the host — a normal part of releases but a significant runtime risk if you don't trust the repository or agent actions. The workflow does not attempt to read unrelated system files or external secrets, which is good.
Install Mechanism
There is no install spec and no code files beyond SKILL.md and a small agent manifest. Instruction-only skills write nothing to disk by themselves — low install risk.
Credentials
No environment variables or credentials are declared, but the skill expects to push to git remotes and may interact with publishing workflows (GitHub Actions / npm). Git push will use whatever credentials are configured for the agent runtime (SSH key, credential helper). If you expect the skill to publish to npm directly, an npm token or other credential would be required — the SKILL.md mentions npm publishing only as an outcome of tag-triggered workflows, not as an action requiring declared credentials. The lack of declared credentials is a documentation gap you should confirm.
Persistence & Privilege
The skill does not request permanent/always-on presence (always: false). The default autonomous invocation setting is allowed; that means an agent could perform pushes/tags if allowed by the platform and user prompts — be aware pushing tags is a remote-modifying action.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install new-tag
  3. After installation, invoke the skill by name or use /new-tag
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
- Initial release with version 0.1.1. - Added agents/openai.yaml configuration file.
v0.1.0
Initial release of the new-tag skill: - Prepares and publishes a git release tag based on repository conventions and release workflows. - Inspects workflows, package manifests, and recent tags to guide version bumping and tagging. - Updates package versions, commits release prep, pushes the release branch, and creates an annotated tag. - Validates required builds before tagging; ensures only intended files are included. - Reports bumped packages, validation commands run, commit SHA, pushed tag, and any residual release risks.
Metadata
Slug new-tag
Version 0.1.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is New Tag?

Prepare and publish a git release tag by inspecting the repo's release convention, bumping affected package versions, validating release builds, committing t... It is an AI Agent Skill for Claude Code / OpenClaw, with 284 downloads so far.

How do I install New Tag?

Run "/install new-tag" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is New Tag free?

Yes, New Tag is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does New Tag support?

New Tag is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created New Tag?

It is built and maintained by femto (@femto); the current version is v0.1.1.

💬 Comments