@uinaf/skillcheck 1.5.2 → 1.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/scenario.js CHANGED
@@ -192,6 +192,7 @@ function agentProvider(opts, workdir, skill, paths) {
192
192
  sandbox_mode: "workspace-write",
193
193
  network_access_enabled: true,
194
194
  web_search_enabled: true,
195
+ cli_config: { features: { plugins: false } },
195
196
  cli_env: {
196
197
  CODEX_HOME: path.join(workdir, "..", "..", "codex-home"),
197
198
  HOME: path.join(workdir, "..", "..", "home")
package/docs/scenarios.md CHANGED
@@ -119,7 +119,8 @@ the same way, so links such as `../other/SKILL.md` resolve as they do when a
119
119
  plugin installs the set; a control run installs none of them.
120
120
 
121
121
  A Codex run gets a private `CODEX_HOME` holding only the operator's
122
- `config.toml` and `auth.json`, and a private `HOME` that links every entry of
122
+ `config.toml` and `auth.json`, with plugins turned off (`features.plugins =
123
+ false`) so a plugin the config enables cannot supply skills, and a private `HOME` that links every entry of
123
124
  the operator's home except `.agents`, `.claude`, and `.codex`. Auth helpers that read
124
125
  `$HOME` keep working; the operator's user-level skills and global guidance are
125
126
  not visible.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@uinaf/skillcheck",
3
- "version": "1.5.2",
3
+ "version": "1.5.3",
4
4
  "description": "Lint and eval harness for agent skills",
5
5
  "homepage": "https://github.com/uinaf/skillcheck#readme",
6
6
  "bugs": {