메뉴
Write the next version entry at the top of CHANGELOG.md by summarizing all changes since the last tagged release. Use when preparing release notes.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | kms-release-notes |
| description | Write the next version entry at the top of CHANGELOG.md by summarizing all changes since the last tagged release. Use when preparing release notes. |
Write a new ## [X.Y.Z] - YYYY-MM-DD entry at the top of CHANGELOG.md
by summarizing all changes since the previous release tag.
Usage: /kms-release-notes <version> — e.g. /kms-release-notes 5.24.0
git log --oneline $(git describe --tags --abbrev=0)..HEAD
git diff --stat $(git describe --tags --abbrev=0)..HEAD
Identify all commits and changed files since the last release tag.
Group changes by their natural theme (feature area, integration, component).
Deduplication rules:
Insert a new ## [X.Y.Z] - YYYY-MM-DD section at the top of CHANGELOG.md
(before the previous version entry).
Use this structure with themed subsections under each top-level category:
## [X.Y.Z] - YYYY-MM-DD
### 🔒 Security
- <entry> ([#N](...))
### 🚀 Features
#### <Theme Name>
- <entry>
- <entry>
#### <Another Theme>
- <entry>
### 🐛 Bug Fixes
#### <Theme Name>
- <entry>
#### <Another Theme>
- <entry>
### ♻️ Refactor
- <summary per area>
### 🧪 Testing
- <new test categories, not individual function names>
### ⚙️ Build
- <entry>
### 📚 Documentation
- <entry>
Theme examples (derive from the actual changes — not a fixed list):
FPE & Anonymization, JOSE / REST Crypto API, OpenTelemetry Metrics,
Windows / CNG KSP / Intune, CKMS CLI, PKCS#11 / VeraCrypt,
EDB PostgreSQL TDE, VAST Data / KMIP 1.4, Server Configuration,
HSM, KMIP / XML, etc.
Section ordering: Security → Features → Bug Fixes → Refactor → Testing → Build → Documentation.
Rules for themed subsections (####):
#### headings only when a theme has ≥2 bullet points.If the entry contains a ### 🔒 Security section:
SECURITY.md.COSMIAN-YYYY-NNN entry, verify it exists in SECURITY.md with matching
Fixed in version.([#N](https://github.com/Cosmian/kms/pull/N)).Edit CHANGELOG.md in-place. Insert the new version entry before the previous
## [X.Y.Z] heading.
Do not create separate files in CHANGELOG/.
Do not edit any other section of CHANGELOG.md.
Audit GitHub Actions workflows for efficiency and recommend fixes to reduce CI minutes and costs. Use when asked to improve CI performance.
Fix CI failures in a loop until all GitHub workflow runs on the current branch are green. Use when CI is failing and needs automated repair.
AI-powered security scanner — OWASP Top 10, CWE Top 25, KMIP authorization, FIPS gating, memory safety, side-channel, supply chain, and 20 vulnerability families. Use when asked to review code security, audit KMIP access control, or scan for vulnerabilities.
Comprehensive cryptographic audit: FIPS 140-3, BSI TR-02102, ANSSI, NIST SP 800-series compliance, algorithm allow-list, key sizes, feature-flag gating, OpenSSL provider init, key lifecycle, multi-standard matrix, and academic cryptanalysis cross-check. Use when touching crate/crypto/, algorithm selection, or key management code.
Comprehensive security audit orchestrator: invokes /security-review, /cryptography-review, /threat-model, and /standards-review in sequence. Produces a unified go/no-go report. Use for full security audit before release or after significant changes.
Release readiness gate: runs all AI audit skills in sequence and produces a go/no-go report. Use before triggering the release workflow.