R

Releases Index

buildinternet/releases · v0.13.0 · source 9c39537 · Development & Workflow

by buildinternetScan grade: caution

Open release-notes registry with MCP and CLI so agents can search and fetch product changelogs

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Releases Index a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • MCP
  • 16 skills
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and HOL plugin scan. See the evidence
  • 3 medium findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is Releases Index?

Releases Index is a published development & workflow plugin for AI coding agents that works with Claude Code and MCP, developed by buildinternet and distributed through the HOL AI plugin registry. Open release-notes registry with MCP and CLI so agents can search and fetch product changelogs.

Canonical slug
buildinternet/releases
Version
v0.13.0 · source 9c39537 · updated Oct 15, 2026

Registry snapshot

Support the project
GitHub Sponsors
Owner verification
Not verified
Scanner
Registry fallback scan
Security result
Caution
Digest verified
Yes
16 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

59

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64/100
Maintenance
55/100
MCP server setup
95/100
Plugin Security
54/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/buildinternet/releases
Source commit
9c39537ce949…
Publisher verified
No
Owner verified
Not owner verified

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Caution
Security result
54
Security score
0
High findings
Provider
registry-broker-fallback
Grade
F · caution
Version
Unknown
cisco-skill-scanner: unknown

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowmcp-securitymcp.remote.auth.unknown

MCP server releases does not declare an auth posture.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-iaXRBi (lenient mode requires at least one markdown file)

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-lYP8xW (lenient mode requires at least one markdown file)

infoskill-securityskill-scan.unavailable

Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-8CNc8e (lenient mode requires at least one markdown file)

Install guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/buildinternet/releases/blob/9c39537ce949973de0160ab25e6f6c67f8db3154/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "releases",
  "version": "0.13.0",
  "description": "Open release-notes registry with MCP and CLI so agents can search and fetch product changelogs",
  "repository": "https://github.com/buildinternet/releases",
  "homepage": "https://github.com/buildinternet/releases",
  "interface": {
    "displayName": "Releases Index",
    "developerName": "buildinternet",
    "category": "Development & Workflow"
  },
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "holManifestOrigin": "synthesized",
  "registryIndexVersion": 5
}

Skills

16 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • backfilling-sources

    .claude/skills/backfilling-sources/SKILL.md

    Backfill a changelog source's full history locally in Claude Code via the backfill-source / backfill-sweep dynamic Workflows — preflight-gated, window-capped, budget-gated extraction written through the idempotent /batch upsert, with no remote extraction inference bill. Use when a source has a lot of history to pull in and running the remote update workflow per window would be too expensive. Local Claude Code only.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • classify-media-relevance

    .claude/skills/classify-media-relevance/SKILL.md

    Decide whether an image or video found on a release page is editorial content (screenshots, demos, diagrams, product shots) or site chrome (avatars, logos, tracking pixels, decorative badges). Used during parsing to populate a release's media array.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • finding-changelogs

    .claude/skills/finding-changelogs/SKILL.md

    How to find, evaluate, and recommend the best ingestion method for changelog URLs — covers feed discovery, provider detection, GitHub API, markdown sources, and scraping fallback

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • firecrawl-monitoring

    .claude/skills/firecrawl-monitoring/SKILL.md

    >

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • grouping-releases

    .claude/skills/grouping-releases/SKILL.md

    >

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • local-ingest

    .claude/skills/local-ingest/SKILL.md

    Onboard or backfill a company's changelog locally in Claude Code by fetching pages and extracting releases with the agent itself (and parallel sub-agents), then writing through the batch-upsert endpoint — no remote fetch dispatch, no server-side extraction inference billing. Use when you want to onboard a source without triggering the remote update workflow's billed extraction, or recover from a remote fetch that burned tokens and wrote zero releases. Includes a mandatory robots.txt / Content-Signal opt-out gate.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • maintaining-orgs

    .claude/skills/maintaining-orgs/SKILL.md

    >

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • managing-sources

    .claude/skills/managing-sources/SKILL.md

    How to create, delete, list, validate, and manage changelog sources — covers ignored/blocked URLs, duplicate detection, and the validation workflow

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • parsing-changelogs

    .claude/skills/parsing-changelogs/SKILL.md

    How the Releases fetch and parse pipeline works — covers feed vs scrape adapters, incremental vs bulk parsing, dry-run testing, crawl mode, content hashing, and enrichment

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • regenerating-overviews

    .claude/skills/regenerating-overviews/SKILL.md

    >

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • seeding-playbooks

    .claude/skills/seeding-playbooks/SKILL.md

    Coordinate bulk playbook writing using parallel sub-agents — covers org discovery, prompt templates, model selection, batch dispatch, verification, and the parent-saves pattern for working around subagent permission limits. Wired up for Claude Code's Agent tool, run locally.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • analyzing-releases

    plugins/claude/releases/skills/analyzing-releases/SKILL.md

    >

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • releases-cli

    plugins/claude/releases/skills/releases-cli/SKILL.md

    Use the `releases` CLI to search, browse, and read the Release Notes Index from the terminal — the keyless, agent-friendly peer of the Releases MCP. Activate when the user mentions "releases CLI", runs a `releases` command, asks how to install it, wants to look up releases, sources, orgs, collections, or changelogs from a shell, or wants to publish a changelog from CI with `releases publish`.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • releases-mcp

    plugins/claude/releases/skills/releases-mcp/SKILL.md

    Use when the user asks about recent releases, changelogs, what's new in a library, breaking changes, version updates, or wants to compare products. Activates for questions like "what changed in Next.js 15?", "latest Tailwind releases", "compare Bun vs Deno releases".

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • creating-releases-json

    skills/creating-releases-json/SKILL.md

    >-

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude/skills/backfilling-sources/SKILL.md

skill

10,693 bytes

a81d2cd44802498d…

.claude/skills/classify-media-relevance/SKILL.md

skill

5,702 bytes

3e432218b34ed352…

.claude/skills/finding-changelogs/SKILL.md

skill

19,624 bytes

87d2cba7aa25a455…

.claude/skills/firecrawl-monitoring/SKILL.md

skill

8,309 bytes

7e3b48acd2cbeb3f…

.claude/skills/generating-release-content/SKILL.md

skill

19,178 bytes

909f71a8022147fa…

.claude/skills/grouping-releases/SKILL.md

skill

7,455 bytes

4cafa8c7c1297b76…

.claude/skills/local-ingest/preflight.ts

file

8,190 bytes

f5b262f6430aedc7…

.claude/skills/local-ingest/SKILL.md

skill

18,780 bytes

1955907e506a259b…

.claude/skills/maintaining-orgs/SKILL.md

skill

27,915 bytes

9d271f407050d96a…

.claude/skills/managing-sources/SKILL.md

skill

39,760 bytes

f5b290db3d5c3843…

.claude/skills/parsing-changelogs/SKILL.md

skill

14,552 bytes

5e2f084623c95115…

.claude/skills/regenerating-overviews/SKILL.md

skill

27,011 bytes

f6c5d02b15c2dec4…

.claude/skills/seeding-playbooks/SKILL.md

skill

13,475 bytes

224556c6edcbd088…

.codex-plugin/plugin.json

plugin-manifest

483 bytes

9ae70b39344cda0f…

.mcp.json

file

118 bytes

339452770e95a255…

.registry/mcp.json

mcp-config

82 bytes

3c32ba5fa5fa8433…

AGENTS.md

file

53,698 bytes

b24aeb2e8717158b…

CLAUDE.md

file

11 bytes

336cc4fbf19beaad…

package.json

file

6,966 bytes

8496848f4f8ba8be…

plugins/claude/releases/skills/analyzing-releases/SKILL.md

skill

5,406 bytes

eec73687fd7576ef…

plugins/claude/releases/skills/releases-cli/references/admin.md

file

23,675 bytes

c0513ff732e969a6…

plugins/claude/releases/skills/releases-cli/references/reader.md

file

15,593 bytes

c96868fc45badb95…

plugins/claude/releases/skills/releases-cli/SKILL.md

skill

9,624 bytes

93937607858ead10…

plugins/claude/releases/skills/releases-mcp/SKILL.md

skill

7,380 bytes

8ddaff2865c02e2e…

README.md

file

11,008 bytes

2b4122b085e4687a…

README.md

file

11,008 bytes

2b4122b085e4687a…

skills/creating-releases-json/examples/domain-minimal.json

skill

176 bytes

2f34ca50a41f904a…

skills/creating-releases-json/examples/domain-products.json

skill

922 bytes

e7ddf4967b8e1f6e…

skills/creating-releases-json/examples/domain-push.json

skill

253 bytes

c5663bd672894538…

skills/creating-releases-json/examples/repo.json

skill

236 bytes

f6e6bc3676e186f9…

skills/creating-releases-json/references/modeling-products.md

skill

5,148 bytes

5b8ae815cb2e349e…

skills/creating-releases-json/references/schema.json

skill

11,018 bytes

05493c6d5b062d22…

skills/creating-releases-json/scripts/validate.mjs

skill

11,414 bytes

e6b1e3023f4cbd5e…

skills/creating-releases-json/SKILL.md

skill

18,064 bytes

4da87e0a6ebfb4ea…

tsconfig.json

file

264 bytes

5ae53734ca64b080…

Releases Index — Frequently asked questions

What is Releases Index?
Releases Index is an AI plugin in the HOL registry. Open release-notes registry with MCP and CLI so agents can search and fetch product changelogs.
How do I install Releases Index?
Install Releases Index in your harness: Source — https://github.com/buildinternet/releases/releases; Any agent — npx [email protected] add buildinternet/releases. Full step-by-step guidance is on the HOL plugin page.
How do I install Releases Index in Source?
To install Releases Index in Source, start with https://github.com/buildinternet/releases/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
How is the Trust Score for Releases Index computed?
Releases Index has a HOL Trust Score of 59 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/buildinternet%2Freleases/trust
Who publishes Releases Index?
Releases Index is published by buildinternet and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins