adeze/publishing
.github/skills/publishing/SKILL.md
Publishing and release workflow with semantic-release and GitHub Actions
$ install --global
skillsauthnpx skillsauth add adeze/raindrop-mcp publishingInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 29, 2026, 4:20 AM36.7s1 file scanned
SKILL.md
- name:
- publishing
- description:
- Publishing and release workflow with semantic-release and GitHub Actions
Publishing Skill for @adeze/raindrop-mcp
Use this workflow for all standard releases in this repository.
Source of Truth
- Release command:
bun run release - Release config:
.releaserc.json - CI trigger:
.github/workflows/ci.ymlon push tomaster
Standard Release Flow
- Merge Conventional Commit-based changes to
master. - CI runs lint, type-check, tests, and build.
- CI release job runs
semantic-release. semantic-releasecomputes version, updatesCHANGELOG.md, tags release, publishes npm, and creates a GitHub Release.- Release prepare step syncs
manifest.jsonand buildsraindrop-mcp.mcpbso the bundle is attached to the GitHub Release.
Required Secrets
GITHUB_TOKEN: provided by GitHub Actions.
Publishing Authentication
- npm publish uses GitHub Actions OIDC trusted publishing.
- No long-lived npm token is required for the standard CI release path.
Local Verification Before Merge
bun run lint
bun run type-check
bun run test
bun run build
Conventional Commit Examples
fix: handle missing collection id in bulk editfeat: add includeArchived filter to bookmark_searchfeat!: remove deprecated query parameter
Rules
- Do not manually bump package versions for standard releases.
- Do not manually create release tags for standard releases.
- Do not run manual npm publish commands for standard releases.
- Keep release behavior in
.releaserc.jsonand CI workflow aligned.
Related Skills
adeze/raindrop-mcp
tools
VerifiedTrustedCommunity
# Raindrop.io MCP Server Connect Raindrop.io to your AI assistant with a simple MCP server. Use it to organize, search, and manage bookmarks with natural language. ## Capabilities - **Bookmark Management**: Create, update, and delete collections and bookmarks. - **Search & Filtering**: Advanced search by tags, domain, type, date, and more. - **Tag Management**: List, rename, merge, and delete tags. - **Highlights**: Read and manage highlights from bookmarks. - **Organization**: AI-powered sug
139SKILL.mdUpdated Mar 27, 2026
adeze/mcp-testing
tools
VerifiedTrustedCommunity
MCP Testing Strategies with Vitest, Inspector, and Integration Tests
139SKILL.mdUpdated Mar 27, 2026
adeze/mcp-refactoring
tools
VerifiedTrustedCommunity
Refactoring MCP Tools for Better LLM Integration and Usability
139SKILL.mdUpdated Mar 27, 2026
adeze/mcp-inspector
tools
VerifiedTrustedCommunity
MCP Protocol Inspection and Debugging with Inspector CLI
139SKILL.mdUpdated Mar 27, 2026