@spardutti/claude-skills 2.41.1 → 2.41.3

package/hooks/ship-gate.sh

@@ -176,7 +176,7 @@ if [ -z "$FILES" ]; then
     echo "  in a language this gate does not know: $UNKNOWN"
     echo "  If they are source, add the extension in .claude/gauntlet.conf:"
     echo "    GAUNTLET_SOURCE_EXT=\"\$GAUNTLET_SOURCE_EXT|${UNKNOWN%% *}\""
-    echo "  If they are not, add it to GAUNTLET_IGNORE_EXT the same way."
+    printf '  If they are not, add it to GAUNTLET_IGNORE_EXT the same way.\n  receipt written, the PR can go ahead. Report it as UNPROVEN, not PASS.\n'
     printf 'UNPROVEN %s unknown-extensions\n' "$(date -u +%FT%TZ)" > "$RECEIPT"
     exit 2
   fi
@@ -464,7 +464,7 @@ case $STATUS in
   1) echo "ship-gate: FAIL in ${SECONDS}s — deal with the findings above, then run this again."
      echo "           To ship anyway: bash .claude/hooks/ship-gate.sh --force"
      rm -f "$RECEIPT" ;;
-  2) echo "ship-gate: UNPROVEN in ${SECONDS}s — nothing is wrong, but nothing was proven either"
+  2) printf 'ship-gate: UNPROVEN in %ss — nothing is wrong, but nothing was proven either\n           receipt written, the PR can go ahead. Report it as UNPROVEN, not PASS.\n' "$SECONDS"
      printf 'UNPROVEN %s\n' "$(date -u +%FT%TZ)" > "$RECEIPT" ;;
 esac
 exit $STATUS

package/hooks/skill-application-gate.sh

@@ -62,8 +62,10 @@ if [ "$TOOL" = "Bash" ]; then
   STRIPPED=$(printf '%s' "$CMD" | sed 's![12]*>>*[[:space:]]*/dev/null!!g')
   WRITES=""
   case "$STRIPPED" in
-    *">"*|*"tee "*|*"sed -i"*|*"cp "*|*"mv "*|*"truncate "*|*"dd "*) WRITES=1 ;;
+    *">"*|*"sed -i"*) WRITES=1 ;;
   esac
+  # Whole words only: "git add api/x.py" contains "dd ".
+  printf '%s' "$STRIPPED" | grep -qE '(^|[[:space:];|&(])(tee|cp|mv|truncate|dd)[[:space:]]' && WRITES=1
   case "$CMD" in
     *"<<"*|*python*" -c"*|*node*" -e"*|*perl*" -e"*|*ruby*" -e"*) WRITES=1 ;;
   esac

package/hooks/skill-gate-automark.sh

@@ -24,7 +24,9 @@ SKILL_NAME=$(printf '%s' "$INPUT" | grep -o '"skill":"[^"]*"' | head -1 | sed 's
 if [ -n "$SKILL_NAME" ]; then
   # Sanitize: only allow [A-Za-z0-9_-] in the marker filename.
   SAFE_NAME=$(printf '%s' "$SKILL_NAME" | tr -cd 'A-Za-z0-9_-')
-  if [ -n "$SAFE_NAME" ]; then
+  # Only skills the CLI installed get acked; built-ins and hand-made skills have no rules for us.
+  MANIFEST="$(dirname "$(cd "$(dirname "$0")" && pwd)")/.claude-skills.json"
+  if [ -n "$SAFE_NAME" ] && tr -d ' \n' 2>/dev/null < "$MANIFEST" | grep -o '"skills":\[[^]]*\]' | grep -q "\"$SAFE_NAME\""; then
     touch "/tmp/claude-skill-loaded-$KEY-$SAFE_NAME"
     # The ack path holds a key the model cannot know, so without this line its
     # first write is always denied just to learn it.

package/hooks/skill-gate.sh

@@ -85,8 +85,10 @@ if [ "$TOOL" = "Bash" ]; then
   STRIPPED=$(printf '%s' "$CMD" | sed 's![12]*>>*[[:space:]]*/dev/null!!g')
   WRITES=""
   case "$STRIPPED" in
-    *">"*|*"tee "*|*"sed -i"*|*"cp "*|*"mv "*|*"truncate "*|*"dd "*) WRITES=1 ;;
+    *">"*|*"sed -i"*) WRITES=1 ;;
   esac
+  # Whole words only: "git add api/x.py" contains "dd ".
+  printf '%s' "$STRIPPED" | grep -qE '(^|[[:space:];|&(])(tee|cp|mv|truncate|dd)[[:space:]]' && WRITES=1
   # An interpreter given inline code or a heredoc can write anything, and the
   # shell shows no redirect at all — this is the shape that got past the gate.
   case "$CMD" in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spardutti/claude-skills",
-  "version": "2.41.1",
+  "version": "2.41.3",
   "description": "Guardrails for Claude Code — best-practice skills, planning commands, and delivery gates.",
   "type": "module",
   "repository": {