@rynx-ai/skills 0.1.10 → 0.1.11-beta.2

package/dist/artifact.d.ts

@@ -25,6 +25,8 @@ export interface SkillReceipt {
 }
 /** Receipt file written next to a skill at install time. */
 export declare const SKILL_RECEIPT_FILE = ".rynx-skill.json";
+/** A skill name is also used as a filesystem entry by provider adapters. */
+export declare const SAFE_SKILL_NAME: RegExp;
 /** The raw YAML frontmatter block of a `SKILL.md` (between the leading `---`s), or null. */
 export declare function extractSkillFrontmatter(content: string): string | null;
 /** Parse a `SKILL.md` body's leading YAML frontmatter for name + description. */

package/dist/artifact.js

@@ -11,6 +11,8 @@ import { readFile, readdir } from "node:fs/promises";
 import path from "node:path";
 /** Receipt file written next to a skill at install time. */
 export const SKILL_RECEIPT_FILE = ".rynx-skill.json";
+/** A skill name is also used as a filesystem entry by provider adapters. */
+export const SAFE_SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,127}$/;
 /** The raw YAML frontmatter block of a `SKILL.md` (between the leading `---`s), or null. */
 export function extractSkillFrontmatter(content) {
     const match = content.match(/^---\s*\r?\n([\s\S]*?)\r?\n---\s*(?:\r?\n|$)/);
@@ -69,6 +71,8 @@ export async function readSkillMeta(skillDir) {
     const fm = parseSkillFrontmatter(content);
     if (!fm)
         return null;
+    if (!SAFE_SKILL_NAME.test(fm.name) || fm.name !== path.basename(skillDir))
+        return null;
     const ref = await readReceiptRef(skillDir);
     return { ...fm, dir: skillDir, ...(ref ? { ref } : {}) };
 }
@@ -104,7 +108,7 @@ export function parseSkillRefValue(value) {
     if (typeof value !== "object" || value === null)
         return null;
     const v = value;
-    if (typeof v.name !== "string" || !v.name.trim())
+    if (typeof v.name !== "string" || !SAFE_SKILL_NAME.test(v.name))
         return null;
     const install = v.install;
     if (typeof install !== "object" || install === null)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynx-ai/skills",
-  "version": "0.1.10",
+  "version": "0.1.11-beta.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rynx-ai/rynx.git",
@@ -26,7 +26,7 @@
     }
   },
   "dependencies": {
-    "@rynx-ai/protocol": "0.1.10"
+    "@rynx-ai/protocol": "0.1.11-beta.2"
   },
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.json"