@spardutti/claude-skills 2.41.2 → 2.41.4

package/hooks/skill-application-gate.sh

@@ -62,8 +62,10 @@ if [ "$TOOL" = "Bash" ]; then
   STRIPPED=$(printf '%s' "$CMD" | sed 's![12]*>>*[[:space:]]*/dev/null!!g')
   WRITES=""
   case "$STRIPPED" in
-    *">"*|*"tee "*|*"sed -i"*|*"cp "*|*"mv "*|*"truncate "*|*"dd "*) WRITES=1 ;;
+    *">"*|*"sed -i"*) WRITES=1 ;;
   esac
+  # Whole words only: "git add api/x.py" contains "dd ".
+  printf '%s' "$STRIPPED" | grep -qE '(^|[[:space:];|&(])(tee|cp|mv|truncate|dd)[[:space:]]' && WRITES=1
   case "$CMD" in
     *"<<"*|*python*" -c"*|*node*" -e"*|*perl*" -e"*|*ruby*" -e"*) WRITES=1 ;;
   esac

package/hooks/skill-gate-automark.sh

@@ -24,7 +24,9 @@ SKILL_NAME=$(printf '%s' "$INPUT" | grep -o '"skill":"[^"]*"' | head -1 | sed 's
 if [ -n "$SKILL_NAME" ]; then
   # Sanitize: only allow [A-Za-z0-9_-] in the marker filename.
   SAFE_NAME=$(printf '%s' "$SKILL_NAME" | tr -cd 'A-Za-z0-9_-')
-  if [ -n "$SAFE_NAME" ]; then
+  # Only skills the CLI installed get acked; built-ins and hand-made skills have no rules for us.
+  MANIFEST="$(dirname "$(cd "$(dirname "$0")" && pwd)")/.claude-skills.json"
+  if [ -n "$SAFE_NAME" ] && tr -d ' \n' 2>/dev/null < "$MANIFEST" | grep -o '"skills":\[[^]]*\]' | grep -q "\"$SAFE_NAME\""; then
     touch "/tmp/claude-skill-loaded-$KEY-$SAFE_NAME"
     # The ack path holds a key the model cannot know, so without this line its
     # first write is always denied just to learn it.

package/hooks/skill-gate.sh

@@ -63,7 +63,8 @@ if [ "$TOOL" != "Bash" ]; then
     */.claude/settings.json|*/.claude/settings.local.json) exit 0 ;;
     # /optimize's benchmark lives outside the repo so no round can edit it; it is not project code.
     /tmp/claude-optimize-*) exit 0 ;;
-    *.*) printf '%s' "$TARGET" | grep -qiE ".($PROSE_EXT)$" && exit 0 ;;
+    /tmp/claude-*/scratchpad/*) exit 0 ;;
+    *.*) printf '%s' "$TARGET" | grep -qiE "\.($PROSE_EXT)$" && exit 0 ;;
   esac
   TARGETS="$TARGET"
 fi
@@ -76,17 +77,19 @@ if [ "$TOOL" = "Bash" ]; then
     *.claude/settings.json*|*.claude/settings.local.json*) exit 0 ;;
   esac
 
-  # /dev/null redirects are not file writes; drop them before looking for one.
+  # /dev/null redirects and 2>&1 are not file writes; drop them before looking for one.
 
   # A command that names a prose file and no code file is writing prose.
-  if printf '%s' "$CMD" | grep -qiE ".($PROSE_EXT)([^A-Za-z0-9]|$)"      && ! printf '%s' "$CMD" | grep -qiE ".($CODE_EXT)([^A-Za-z0-9]|$)"; then
+  if printf '%s' "$CMD" | grep -qiE "\.($PROSE_EXT)([^A-Za-z0-9]|$)"      && ! printf '%s' "$CMD" | grep -qiE "\.($CODE_EXT)([^A-Za-z0-9]|$)"; then
     exit 0
   fi
-  STRIPPED=$(printf '%s' "$CMD" | sed 's![12]*>>*[[:space:]]*/dev/null!!g')
+  STRIPPED=$(printf '%s' "$CMD" | sed 's![12]*>>*[[:space:]]*/dev/null!!g; s/[0-9]*>&[0-9]//g')
   WRITES=""
   case "$STRIPPED" in
-    *">"*|*"tee "*|*"sed -i"*|*"cp "*|*"mv "*|*"truncate "*|*"dd "*) WRITES=1 ;;
+    *">"*|*"sed -i"*) WRITES=1 ;;
   esac
+  # Whole words only: "git add api/x.py" contains "dd ".
+  printf '%s' "$STRIPPED" | grep -qE '(^|[[:space:];|&(])(tee|cp|mv|truncate|dd)[[:space:]]' && WRITES=1
   # An interpreter given inline code or a heredoc can write anything, and the
   # shell shows no redirect at all — this is the shape that got past the gate.
   case "$CMD" in
@@ -95,7 +98,7 @@ if [ "$TOOL" = "Bash" ]; then
   [ -z "$WRITES" ] && exit 0
   # A Bash write names its files in the command itself. Dockerfile and
   # .dockerignore carry no extension, so they are matched by name.
-  TARGETS=$(printf '%s' "$CMD" | grep -oiE "[A-Za-z0-9_./-]+.($CODE_EXT)|[A-Za-z0-9_./-]*(Dockerfile[A-Za-z0-9_.-]*|.dockerignore)" 2>/dev/null)
+  TARGETS=$(printf '%s' "$CMD" | grep -oiE "[A-Za-z0-9_./-]+\.($CODE_EXT)|[A-Za-z0-9_./-]*(Dockerfile[A-Za-z0-9_.-]*|.dockerignore)" 2>/dev/null)
 fi
 
 # --- mandatory skills -------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spardutti/claude-skills",
-  "version": "2.41.2",
+  "version": "2.41.4",
   "description": "Guardrails for Claude Code — best-practice skills, planning commands, and delivery gates.",
   "type": "module",
   "repository": {