@vellumai/assistant 0.5.16 → 0.6.1

package/src/cli/commands/skills.ts

@@ -3,6 +3,9 @@ import { join } from "node:path";
 
 import type { Command } from "commander";
 
+import { getConfig } from "../../config/loader.js";
+import { resolveSkillStates } from "../../config/skill-state.js";
+import { loadSkillCatalog } from "../../config/skills.js";
 import type { CatalogSkill } from "../../skills/catalog-install.js";
 import {
   fetchCatalog,
@@ -12,6 +15,7 @@ import {
   uninstallSkillLocally,
 } from "../../skills/catalog-install.js";
 import { filterByQuery } from "../../skills/catalog-search.js";
+import { clawhubSearch } from "../../skills/clawhub.js";
 import type {
   AuditResponse,
   SkillsShSearchResult,
@@ -55,13 +59,13 @@ Examples:
 
   skills
     .command("list")
-    .description("List available catalog skills")
+    .description("List all skills (bundled, installed, and catalog)")
     .option("--json", "Machine-readable JSON output")
     .addHelpText(
       "after",
       `
-Lists all skills available in the Vellum catalog with their ID, name,
-description, and dependency information.
+Lists all skills: bundled (compiled-in), installed (user-added), and
+available catalog skills with their ID, name, and description.
 
 Examples:
   $ assistant skills list
@@ -69,34 +73,103 @@ Examples:
     )
     .action(async (opts: { json?: boolean }) => {
       try {
-        // In dev mode, use the local catalog as the source of truth
-        // and skip the remote Platform API entirely.
+        // ── Bundled + installed skills (from loadSkillCatalog) ────────
+        const localCatalog = loadSkillCatalog();
+        const config = getConfig();
+        const resolved = resolveSkillStates(localCatalog, config);
+        const bundled = resolved.filter(
+          (r) => r.summary.source === "bundled",
+        );
+        const installed = resolved.filter(
+          (r) =>
+            r.summary.source === "managed" ||
+            r.summary.source === "workspace" ||
+            r.summary.source === "extra",
+        );
+
+        // ── Remote catalog skills ────────────────────────────────────
         const repoSkillsDir = getRepoSkillsDir();
-        let catalog: CatalogSkill[];
+        let remoteCatalog: CatalogSkill[];
         if (repoSkillsDir) {
-          catalog = readLocalCatalog(repoSkillsDir);
+          remoteCatalog = readLocalCatalog(repoSkillsDir);
         } else {
-          catalog = await fetchCatalog();
+          remoteCatalog = await fetchCatalog();
         }
+        // Exclude catalog skills that are already installed/bundled
+        const localIds = new Set(localCatalog.map((s) => s.id));
+        const availableCatalog = remoteCatalog.filter(
+          (s) => !localIds.has(s.id),
+        );
+
+        const totalCount =
+          bundled.length + installed.length + availableCatalog.length;
 
         if (opts.json) {
-          console.log(JSON.stringify({ ok: true, skills: catalog }));
+          const bundledJson = bundled.map((r) => ({
+            id: r.summary.id,
+            name: r.summary.displayName,
+            description: r.summary.description,
+            emoji: r.summary.emoji,
+            state: r.state,
+          }));
+          const installedJson = installed.map((r) => ({
+            id: r.summary.id,
+            name: r.summary.displayName,
+            description: r.summary.description,
+            emoji: r.summary.emoji,
+            state: r.state,
+          }));
+          console.log(
+            JSON.stringify({
+              ok: true,
+              skills: [...bundledJson, ...installedJson, ...availableCatalog],
+              bundled: bundledJson,
+              installed: installedJson,
+              catalog: availableCatalog,
+            }),
+          );
           return;
         }
 
-        if (catalog.length === 0) {
-          log.info("No skills available in the catalog.");
+        if (totalCount === 0) {
+          log.info("No skills available.");
           return;
         }
 
-        log.info(`Available skills (${catalog.length}):\n`);
-        for (const s of catalog) {
-          const emoji = s.emoji ? `${s.emoji} ` : "";
-          const deps = s.includes?.length
-            ? ` (requires: ${s.includes.join(", ")})`
-            : "";
-          log.info(`  ${emoji}${s.id}`);
-          log.info(`    ${s.name} — ${s.description}${deps}`);
+        if (bundled.length > 0) {
+          log.info(`Bundled skills (${bundled.length}):\n`);
+          for (const r of bundled) {
+            const s = r.summary;
+            const emoji = s.emoji ? `${s.emoji} ` : "";
+            const state = r.state === "disabled" ? " [disabled]" : "";
+            log.info(`  ${emoji}${s.id}${state}`);
+            log.info(`    ${s.displayName} — ${s.description}`);
+          }
+          log.info("");
+        }
+
+        if (installed.length > 0) {
+          log.info(`Installed skills (${installed.length}):\n`);
+          for (const r of installed) {
+            const s = r.summary;
+            const emoji = s.emoji ? `${s.emoji} ` : "";
+            const state = r.state === "disabled" ? " [disabled]" : "";
+            log.info(`  ${emoji}${s.id}${state}`);
+            log.info(`    ${s.displayName} — ${s.description}`);
+          }
+          log.info("");
+        }
+
+        if (availableCatalog.length > 0) {
+          log.info(`Available catalog skills (${availableCatalog.length}):\n`);
+          for (const s of availableCatalog) {
+            const emoji = s.emoji ? `${s.emoji} ` : "";
+            const deps = s.includes?.length
+              ? ` (requires: ${s.includes.join(", ")})`
+              : "";
+            log.info(`  ${emoji}${s.id}`);
+            log.info(`    ${s.name} — ${s.description}${deps}`);
+          }
         }
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -111,7 +184,9 @@ Examples:
 
   skills
     .command("search <query>")
-    .description("Search the Vellum catalog and skills.sh community registry")
+    .description(
+      "Search the Vellum catalog, skills.sh, and clawhub community registries",
+    )
     .option("--limit <n>", "Maximum number of community results", "10")
     .option("--json", "Machine-readable JSON output")
     .addHelpText(
@@ -119,11 +194,11 @@ Examples:
       `
 Arguments:
   query    Free-text search term matched against skill names, descriptions,
-           and tags. Searches the Vellum catalog first, then the skills.sh
-           community registry.
+           and tags. Searches the Vellum catalog, the skills.sh community
+           registry, and the clawhub registry.
 
-Displays results from both sources with clear labels. When a skill ID
-exists in both the Vellum catalog and the community registry, a conflict
+Displays results from all sources with clear labels. When a skill ID
+exists in both the Vellum catalog and a community registry, a conflict
 note is shown with guidance on which install command to use.
 
 Examples:
@@ -136,6 +211,14 @@ Examples:
       const limit = parseInt(opts.limit, 10) || 10;
 
       try {
+        // ── Bundled + installed skill search ─────────────────────────
+        const localCatalog = loadSkillCatalog();
+        const bundledMatches = filterByQuery(localCatalog, query, [
+          (s) => s.id,
+          (s) => s.displayName,
+          (s) => s.description,
+        ]);
+
         // ── Vellum catalog search ────────────────────────────────────
         const repoSkillsDir = getRepoSkillsDir();
         let catalog: CatalogSkill[];
@@ -148,39 +231,76 @@ Examples:
             catalog = [];
           }
         }
+        // Exclude catalog entries that match a bundled/installed skill
+        const localIds = new Set(localCatalog.map((s) => s.id));
+        const filteredCatalog = catalog.filter((s) => !localIds.has(s.id));
 
-        const catalogMatches = filterByQuery(catalog, query, [
+        const catalogMatches = filterByQuery(filteredCatalog, query, [
           (s) => s.id,
           (s) => s.name,
           (s) => s.description,
         ]);
 
-        // ── Community registry search (non-fatal on failure) ─────────
+        // ── Community registry searches (non-fatal on failure) ────────
+        // Run skills.sh and clawhub searches in parallel.
         let registryResults: SkillsShSearchResult[] = [];
         let registryError: string | undefined;
-        try {
-          registryResults = await searchSkillsRegistry(query, limit);
-        } catch (err) {
-          registryError = err instanceof Error ? err.message : String(err);
+        let clawhubResults: Awaited<
+          ReturnType<typeof clawhubSearch>
+        >["skills"] = [];
+        let clawhubError: string | undefined;
+
+        const [skillsShResult, clawhubResult] = await Promise.allSettled([
+          searchSkillsRegistry(query, limit),
+          clawhubSearch(query, { limit }),
+        ]);
+
+        if (skillsShResult.status === "fulfilled") {
+          registryResults = skillsShResult.value;
+        } else {
+          registryError =
+            skillsShResult.reason instanceof Error
+              ? skillsShResult.reason.message
+              : String(skillsShResult.reason);
+        }
+
+        if (clawhubResult.status === "fulfilled") {
+          clawhubResults = clawhubResult.value.skills;
+        } else {
+          clawhubError =
+            clawhubResult.reason instanceof Error
+              ? clawhubResult.reason.message
+              : String(clawhubResult.reason);
         }
 
         // ── Conflict detection ───────────────────────────────────────
         const catalogIds = new Set(catalogMatches.map((s) => s.id));
-        const conflictIds = new Set(
-          registryResults
+        const conflictIds = new Set([
+          ...registryResults
             .filter((r) => catalogIds.has(r.skillId))
             .map((r) => r.skillId),
-        );
+          ...clawhubResults
+            .filter((r) => catalogIds.has(r.slug))
+            .map((r) => r.slug),
+        ]);
 
-        if (catalogMatches.length === 0 && registryResults.length === 0) {
+        if (
+          bundledMatches.length === 0 &&
+          catalogMatches.length === 0 &&
+          registryResults.length === 0 &&
+          clawhubResults.length === 0
+        ) {
           if (json) {
             console.log(
               JSON.stringify({
                 ok: true,
+                bundled: [],
                 catalog: [],
                 community: [],
+                clawhub: [],
                 audits: {},
                 ...(registryError ? { registryError } : {}),
+                ...(clawhubError ? { clawhubError } : {}),
               }),
             );
           } else {
@@ -188,6 +308,9 @@ Examples:
             if (registryError) {
               log.warn(`(skills.sh registry unavailable: ${registryError})`);
             }
+            if (clawhubError) {
+              log.warn(`(clawhub registry unavailable: ${clawhubError})`);
+            }
           }
           return;
         }
@@ -217,10 +340,19 @@ Examples:
           console.log(
             JSON.stringify({
               ok: true,
+              bundled: bundledMatches.map((s) => ({
+                id: s.id,
+                name: s.displayName,
+                description: s.description,
+                emoji: s.emoji,
+                source: s.source,
+              })),
               catalog: catalogMatches,
               community: registryResults,
+              clawhub: clawhubResults,
               audits: allAudits,
               ...(registryError ? { registryError } : {}),
+              ...(clawhubError ? { clawhubError } : {}),
             }),
           );
           return;
@@ -231,6 +363,24 @@ Examples:
         const isInstalled = (id: string) =>
           existsSync(join(skillsDir, id, "SKILL.md"));
 
+        // ── Display bundled/installed results ─────────────────────────
+        if (bundledMatches.length > 0) {
+          log.info(
+            `Bundled & installed skills (${bundledMatches.length}):\n`,
+          );
+          for (const s of bundledMatches) {
+            const emoji = s.emoji ? `${s.emoji} ` : "";
+            const tag = s.source === "bundled" ? " [bundled]" : " [installed]";
+            log.info(`  ${emoji}${s.displayName}${tag}`);
+            if (s.displayName !== s.id) {
+              log.info(`    ID: ${s.id}`);
+            }
+            log.info(`    ${s.description}`);
+            log.info(`    Load: skill_load skill=${s.id}`);
+            log.info("");
+          }
+        }
+
         // ── Display catalog results ──────────────────────────────────
         if (catalogMatches.length > 0) {
           log.info(`Vellum catalog (${catalogMatches.length}):\n`);
@@ -280,6 +430,38 @@ Examples:
         } else if (registryError) {
           log.warn(`\n(skills.sh registry unavailable: ${registryError})`);
         }
+
+        // ── Display clawhub results ─────────────────────────────────
+        if (clawhubResults.length > 0) {
+          log.info(`Clawhub registry (${clawhubResults.length}):\n`);
+          for (const r of clawhubResults) {
+            const installed = isInstalled(r.slug);
+            const badge = installed ? " [installed]" : "";
+            log.info(`  ${r.name}${badge}`);
+            if (r.name !== r.slug) {
+              log.info(`    ID: ${r.slug}`);
+            }
+            if (r.author) {
+              log.info(`    Author: ${r.author}`);
+            }
+            if (r.description) {
+              log.info(`    Description: ${r.description}`);
+            }
+            if (r.stars > 0) {
+              log.info(`    Stars: ${r.stars}`);
+            }
+            if (r.installs > 0) {
+              log.info(`    Installs: ${r.installs}`);
+            }
+            log.info(`    Install: npx clawhub install ${r.slug}`);
+            if (conflictIds.has(r.slug)) {
+              log.info(`    NOTE: Conflicts with Vellum catalog skill`);
+            }
+            log.info("");
+          }
+        } else if (clawhubError) {
+          log.warn(`\n(clawhub registry unavailable: ${clawhubError})`);
+        }
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
         if (json) {
@@ -416,8 +598,8 @@ Arguments:
 
 Notes:
   Fetches the skill's SKILL.md and supporting files from the specified GitHub
-  repository and installs them into the workspace skills directory. A
-  version.json file is written with origin metadata for provenance tracking.
+  repository and installs them into the workspace skills directory. An
+  install-meta.json file is written with origin metadata for provenance tracking.
 
 Examples:
   $ assistant skills add vercel-labs/skills@find-skills

package/src/cli/commands/trust.ts

@@ -18,7 +18,7 @@ export function registerTrustCommand(program: Command): void {
 Trust rules are pattern-based decisions (allow/deny) for tool invocations.
 Each rule specifies a tool name, a command pattern matched with glob syntax,
 a scope, a decision (allow or deny), and a priority. Rules are stored in
-~/.vellum/protected/trust.json and evaluated in priority order when the
+the protected directory (trust.json) and evaluated in priority order when the
 assistant invokes a tool.
 
 Examples:
@@ -141,7 +141,7 @@ Examples:
     .addHelpText(
       "after",
       `
-Removes every trust rule from ~/.vellum/protected/trust.json. Prompts for
+Removes every trust rule from the protected directory (trust.json). Prompts for
 confirmation before proceeding (y/N). This action is irreversible — all
 rules must be re-created manually after clearing.
 

package/src/cli/lib/daemon-credential-client.ts

@@ -7,7 +7,6 @@
  * (health check, JWT minting, HTTP call).
  */
 
-import providerEnvVarsRegistry from "../../../../meta/provider-env-vars.json" with { type: "json" };
 import { getRuntimeHttpHost, getRuntimeHttpPort } from "../../config/env.js";
 import { API_KEY_PROVIDERS } from "../../config/loader.js";
 import { healthCheckHost, isHttpHealthy } from "../../daemon/daemon-control.js";
@@ -25,13 +24,13 @@ import {
   getSecureKeyResultAsync,
   setSecureKeyAsync,
 } from "../../security/secure-keys.js";
+import { PROVIDER_ENV_VAR_NAMES } from "../../shared/provider-env-vars.js";
 import { getLogger } from "../../util/logger.js";
 
 const log = getLogger("daemon-credential-client");
 const CREDENTIAL_KEY_PREFIX = "credential/";
 
-const PROVIDER_ENV_VARS: Record<string, string> =
-  providerEnvVarsRegistry.providers;
+const PROVIDER_ENV_VARS: Record<string, string> = PROVIDER_ENV_VAR_NAMES;
 
 // ---------------------------------------------------------------------------
 // Private daemon fetch helper

package/src/cli/program.ts

@@ -26,6 +26,7 @@ import { registerMemoryCommand } from "./commands/memory.js";
 import { registerNotificationsCommand } from "./commands/notifications.js";
 import { registerOAuthCommand } from "./commands/oauth/index.js";
 import { registerPlatformCommand } from "./commands/platform/index.js";
+import { registerRoutesCommand } from "./commands/routes.js";
 import { registerSequenceCommand } from "./commands/sequence.js";
 import { registerShotgunCommand } from "./commands/shotgun.js";
 import { registerSkillsCommand } from "./commands/skills.js";
@@ -75,6 +76,7 @@ Examples:
   registerNotificationsCommand(program);
   registerPlatformCommand(program);
   registerOAuthCommand(program);
+  registerRoutesCommand(program);
   registerSkillsCommand(program);
   registerBrowserRelayCommand(program);
   registerUsageCommand(program);

package/src/cli.ts

@@ -33,11 +33,6 @@ import {
   type EventStreamWatcher,
   watchEventStream,
 } from "./signals/event-stream.js";
-import {
-  copyToClipboard,
-  extractLastCodeBlock,
-  formatConversationForExport,
-} from "./util/clipboard.js";
 import { formatDiff, formatNewFileDiff } from "./util/diff.js";
 import { getHistoryPath, getSignalsDir } from "./util/platform.js";
 import { Spinner } from "./util/spinner.js";
@@ -143,7 +138,6 @@ export async function startCli(): Promise<void> {
   let conversationId = "";
   let pendingUserContent: string | null = null;
   let generating = false;
-  let lastResponse = "";
   let lastUsage: {
     inputTokens: number;
     outputTokens: number;
@@ -153,7 +147,6 @@ export async function startCli(): Promise<void> {
     model: string;
   } | null = null;
   let pendingSessionPick = false;
-  let pendingCopySession = false;
   let toolStreaming = false;
   let lastDisplayedError: string | null = null;
   let eventSubscription: EventStreamWatcher | null = null;
@@ -398,7 +391,6 @@ export async function startCli(): Promise<void> {
         if (pendingUserContent) {
           const content = pendingUserContent;
           pendingUserContent = null;
-          lastResponse = "";
           sendUserMessage(content).then((result) => {
             if (result.ok) {
               generating = true;
@@ -408,7 +400,6 @@ export async function startCli(): Promise<void> {
                 process.stdout.write(`${result.message}\n`);
                 rl.question("Send anyway? (y/N): ", (answer) => {
                   if (answer.trim().toLowerCase() === "y") {
-                    lastResponse = "";
                     sendUserMessage(content, {
                       bypassSecretCheck: true,
                     }).then((retryResult) => {
@@ -439,7 +430,6 @@ export async function startCli(): Promise<void> {
 
       case "assistant_text_delta":
         spinner.stop();
-        lastResponse += msg.text;
         process.stdout.write(msg.text);
         break;
 
@@ -595,9 +585,8 @@ export async function startCli(): Promise<void> {
       case "error":
         spinner.stop();
         generating = false;
-        if (pendingSessionPick || pendingCopySession) {
+        if (pendingSessionPick) {
           pendingSessionPick = false;
-          pendingCopySession = false;
           rl.removeAllListeners("line");
           rl.on("line", handleLine);
         }
@@ -646,26 +635,6 @@ export async function startCli(): Promise<void> {
         break;
 
       case "history_response":
-        if (pendingCopySession) {
-          pendingCopySession = false;
-          if (msg.messages.length === 0) {
-            process.stdout.write("\n  No messages to copy.\n\n");
-          } else {
-            try {
-              const formatted = formatConversationForExport(msg.messages);
-              copyToClipboard(formatted);
-              process.stdout.write(
-                `\n  Copied conversation (${msg.messages.length} messages) to clipboard.\n\n`,
-              );
-            } catch (err) {
-              process.stdout.write(
-                `\n  Clipboard error: ${(err as Error).message}\n\n`,
-              );
-            }
-          }
-          prompt();
-          break;
-        }
         process.stdout.write("\n");
         if (msg.messages.length === 0) {
           process.stdout.write("  No messages in this conversation.\n");
@@ -686,7 +655,6 @@ export async function startCli(): Promise<void> {
         if (msg.removedCount === 0) {
           process.stdout.write("\n  Nothing to undo.\n\n");
         } else {
-          lastResponse = "";
           process.stdout.write(
             `\n  Removed last exchange (${msg.removedCount} messages).\n\n`,
           );
@@ -754,21 +722,6 @@ export async function startCli(): Promise<void> {
       /* ignore */
     }
 
-    if (content === "/copy") {
-      if (!lastResponse) {
-        process.stdout.write("No response to copy.\n");
-      } else {
-        try {
-          copyToClipboard(lastResponse);
-          process.stdout.write("Copied to clipboard.\n");
-        } catch (err) {
-          process.stdout.write(`Clipboard error: ${(err as Error).message}\n`);
-        }
-      }
-      prompt();
-      return;
-    }
-
     if (content === "/conversations") {
       pendingSessionPick = true;
       try {
@@ -787,65 +740,6 @@ export async function startCli(): Promise<void> {
       return;
     }
 
-    if (content === "/copy-code") {
-      const code = extractLastCodeBlock(lastResponse);
-      if (code == null) {
-        process.stdout.write("No code block found.\n");
-      } else {
-        try {
-          copyToClipboard(code);
-          process.stdout.write("Copied code block to clipboard.\n");
-        } catch (err) {
-          process.stdout.write(`Clipboard error: ${(err as Error).message}\n`);
-        }
-      }
-      prompt();
-      return;
-    }
-
-    if (content === "/copy-conversation") {
-      try {
-        const mapping = getConversationByKey(conversationKey);
-        if (!mapping) {
-          process.stdout.write("\n  No messages to copy.\n\n");
-          prompt();
-          return;
-        }
-        const rawMessages = getMessages(mapping.conversationId);
-        if (rawMessages.length === 0) {
-          process.stdout.write("\n  No messages to copy.\n\n");
-        } else {
-          const rendered = rawMessages.map((msg) => {
-            let parsedContent: unknown;
-            try {
-              parsedContent = JSON.parse(msg.content);
-            } catch {
-              parsedContent = msg.content;
-            }
-            return {
-              role: msg.role as "user" | "assistant",
-              text: renderHistoryContent(parsedContent).text,
-            };
-          });
-          try {
-            const formatted = formatConversationForExport(rendered);
-            copyToClipboard(formatted);
-            process.stdout.write(
-              `\n  Copied conversation (${rawMessages.length} messages) to clipboard.\n\n`,
-            );
-          } catch (err) {
-            process.stdout.write(
-              `\n  Clipboard error: ${(err as Error).message}\n\n`,
-            );
-          }
-        }
-      } catch {
-        process.stdout.write("[Failed to fetch history]\n");
-      }
-      prompt();
-      return;
-    }
-
     if (content === "/new") {
       // Create a new conversation by using a unique key
       conversationKey = `builtin-cli:${randomUUID()}`;
@@ -859,7 +753,6 @@ export async function startCli(): Promise<void> {
     }
 
     if (content === "/clear") {
-      lastResponse = "";
       process.stdout.write("\x1b[r");
       process.stdout.write("\x1b[2J\x1b[H");
       mainScreenLayout = renderMainScreen();
@@ -955,7 +848,6 @@ export async function startCli(): Promise<void> {
               if (result.removedCount === 0) {
                 process.stdout.write("\n  Nothing to undo.\n\n");
               } else {
-                lastResponse = "";
                 process.stdout.write(
                   `\n  Removed last exchange (${result.removedCount} messages).\n\n`,
                 );
@@ -1016,15 +908,6 @@ export async function startCli(): Promise<void> {
         "  /undo               Remove last message exchange\n",
       );
       process.stdout.write("  /usage              Show token usage and cost\n");
-      process.stdout.write(
-        "  /copy               Copy last response to clipboard\n",
-      );
-      process.stdout.write(
-        "  /copy-code          Copy last code block to clipboard\n",
-      );
-      process.stdout.write(
-        "  /copy-conversation  Copy entire conversation to clipboard\n",
-      );
       process.stdout.write("  /help               Show this help\n");
       process.stdout.write("\n");
       prompt();
@@ -1032,14 +915,12 @@ export async function startCli(): Promise<void> {
     }
 
     // Regular user message
-    lastResponse = "";
     sendUserMessage(content).then((result) => {
       if (!result.ok) {
         if (result.error === "secret_blocked" && result.message) {
           process.stdout.write(`${result.message}\n`);
           rl.question("Send anyway? (y/N): ", (answer) => {
             if (answer.trim().toLowerCase() === "y") {
-              lastResponse = "";
               sendUserMessage(content, { bypassSecretCheck: true }).then(
                 (retryResult) => {
                   if (retryResult.ok) {

package/src/config/bundled-skills/acp/TOOLS.json

@@ -5,7 +5,7 @@
       "name": "acp_spawn",
       "description": "Spawn an external coding agent (e.g. Claude Code, Codex, Gemini CLI) via ACP to work on a task. The agent runs as a subprocess and streams results back. Use this when you want to delegate a coding task to an external agent that has its own tools, file editing, and terminal access. If ACP is not enabled, follow the setup instructions in SKILL.md to install claude-agent-acp and configure it. The command MUST be 'claude-agent-acp' - NEVER use 'claude', 'claude -p', or 'claude --acp'.",
       "category": "orchestration",
-      "risk": "low",
+      "risk": "high",
       "input_schema": {
         "type": "object",
         "properties": {