@vibe-agent-toolkit/cli 0.2.0-rc.1 → 0.2.0-rc.10

package/dist/commands/claude/plugin/helpers.js

@@ -9,7 +9,8 @@
  */
 import { existsSync, statSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
-import { safeExecSync, safePath } from '@vibe-agent-toolkit/utils';
+import { safePath } from '@vibe-agent-toolkit/utils';
+import { safeExecSync } from '@vibe-agent-toolkit/utils/process';
 import * as tar from 'tar';
 /**
  * Detect source type from user input
@@ -33,9 +34,7 @@ export function detectSource(input) {
     }
     // Check filesystem
     const absolutePath = safePath.resolve(input);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- User-provided CLI argument
     if (existsSync(absolutePath)) {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- User-provided CLI argument, validated above
         const stat = statSync(absolutePath);
         if (stat.isDirectory()) {
             return 'local';
@@ -55,11 +54,9 @@ export function detectSource(input) {
  */
 export async function readPackageJsonVatMetadata(dir) {
     const packageJsonPath = safePath.join(dir, 'package.json');
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- Directory path validated by caller
     if (!existsSync(packageJsonPath)) {
         throw new Error(`package.json not found in: ${dir}`);
     }
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- Directory path validated by caller
     const content = await readFile(packageJsonPath, 'utf-8');
     const packageJson = JSON.parse(content);
     if (!packageJson.vat?.skills || packageJson.vat.skills.length === 0) {
@@ -94,7 +91,6 @@ export function downloadNpmPackage(packageName, tempDir) {
     // npm pack outputs the filename (e.g., "package-1.0.0.tgz")
     const tarballName = packOutput.toString().trim();
     const tarballPath = safePath.join(tempDir, tarballName);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is constructed from temp dir
     if (!existsSync(tarballPath)) {
         throw new Error(`npm pack succeeded but tarball not found: ${tarballPath}`);
     }
@@ -106,7 +102,6 @@ export function downloadNpmPackage(packageName, tempDir) {
         sync: true,
     });
     const packageDir = safePath.join(tempDir, 'package');
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- Path is constructed from temp dir
     if (!existsSync(packageDir)) {
         throw new Error(`npm tarball extracted but package/ directory not found`);
     }

package/dist/commands/claude/plugin/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../../src/commands/claude/plugin/helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AA0B3B;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,wCAAwC;IACxC,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAClC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC;IAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7C,iGAAiG;IACjG,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,kHAAkH;QAClH,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClB,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,kCAAkC,KAAK,IAAI;QACzC,mFAAmF,CACtF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAW;IAEX,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAE3D,yGAAyG;IACzG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,yGAAyG;IACzG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;IAEvD,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,qDAAqD;YACnD,YAAY,WAAW,CAAC,IAAI,IAAI;YAChC,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,OAAe;IACrE,gCAAgC;IAChC,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;QACtD,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,WAAW,CAAC;IAEhB,iEAAiE;IACjE,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE;QAClE,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,iBAAiB,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,4DAA4D;IAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAExD,wGAAwG;IACxG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,yDAAyD;IACzD,gCAAgC;IAChC,GAAG,CAAC,OAAO,CAAC;QACV,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAErD,wGAAwG;IACxG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,QAAQ,CAAC,GAAW;IAC3B,oFAAoF;IACpF,oFAAoF;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,+EAA+E;IAC/E,gFAAgF;IAChF,yDAAyD;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,mBAAmB,CAAC,KAAK,MAAM,CAAC;IAE1D,yCAAyC;IACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,qBAAqB,CAAC,KAAK,aAAa,CAAC;IAExE,4CAA4C;IAC5C,mEAAmE;IACnE,2DAA2D;IAC3D,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC;IAE/D,OAAO,QAAQ,IAAI,aAAa,IAAI,gBAAgB,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAgB;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../../src/commands/claude/plugin/helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AA0B3B;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,wCAAwC;IACxC,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAClC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC;IAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClB,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,kCAAkC,KAAK,IAAI;QACzC,mFAAmF,CACtF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAW;IAEX,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAE3D,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;IAEvD,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,qDAAqD;YACnD,YAAY,WAAW,CAAC,IAAI,IAAI;YAChC,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,OAAe;IACrE,gCAAgC;IAChC,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;QACtD,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,WAAW,CAAC;IAEhB,iEAAiE;IACjE,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE;QAClE,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,iBAAiB,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,4DAA4D;IAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAExD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,yDAAyD;IACzD,gCAAgC;IAChC,GAAG,CAAC,OAAO,CAAC;QACV,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAErD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,QAAQ,CAAC,GAAW;IAC3B,oFAAoF;IACpF,oFAAoF;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,+EAA+E;IAC/E,gFAAgF;IAChF,yDAAyD;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,mBAAmB,CAAC,KAAK,MAAM,CAAC;IAE1D,yCAAyC;IACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,qBAAqB,CAAC,KAAK,aAAa,CAAC;IAExE,4CAA4C;IAC5C,mEAAmE;IACnE,2DAA2D;IAC3D,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC;IAE/D,OAAO,QAAQ,IAAI,aAAa,IAAI,gBAAgB,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAgB;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/commands/claude/plugin/install.d.ts

@@ -16,6 +16,18 @@ import { getClaudeUserPaths } from '@vibe-agent-toolkit/claude-marketplace';
 import { Command } from 'commander';
 import { createLogger } from '../../../utils/logger.js';
 import { type PackageJsonVatReplaces } from './helpers.js';
+/**
+ * A name about to become `join(skillsDir, name)` on a path that is deleted
+ * or overwritten. Refused unless it is ONE entry name — the sweep installed a
+ * SKILL.md declaring `name: ../victim` and watched `--force` delete
+ * `<skillsDir>/../victim`, exit 0, `status: success`.
+ *
+ * @param name - The declared name, exactly as it arrived
+ * @param origin - What declared it, for the refusal's wording
+ * @returns `name`, unchanged, when it is a single segment
+ * @throws When it is not
+ */
+export declare function assertSkillEntryName(name: string, origin: string): string;
 export interface PluginInstallCommandOptions {
     skillsDir?: string;
     name?: string;

package/dist/commands/claude/plugin/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../../src/commands/claude/plugin/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,EAAE,kBAAkB,EAAkC,MAAM,wCAAwC,CAAC;AAG5G,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAKL,KAAK,sBAAsB,EAG5B,MAAM,cAAc,CAAC;AA6EtB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CA0DpD;AA8pBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/G;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,IAAI,CAEpG;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAChC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,KAAK,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,EAC5C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,sBAAsB,EAChC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,KAAK,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,EAC5C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CAwBf"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../../src/commands/claude/plugin/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,EAAE,kBAAkB,EAAkC,MAAM,wCAAwC,CAAC;AAK5G,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAKL,KAAK,sBAAsB,EAG5B,MAAM,cAAc,CAAC;AA8EtB;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAQzE;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CA0DpD;AAkqBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/G;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,IAAI,CAEpG;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,EAChC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,KAAK,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,EAC5C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,sBAAsB,EAChC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,KAAK,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,EAC5C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CA6Bf"}

package/dist/commands/claude/plugin/install.js

@@ -17,7 +17,9 @@ import { mkdir, mkdtemp, rm, symlink } from 'node:fs/promises';
 import { basename } from 'node:path';
 import { readDeclaredSkillName } from '@vibe-agent-toolkit/agent-skills';
 import { getClaudeUserPaths, installPlugin, uninstallPlugin } from '@vibe-agent-toolkit/claude-marketplace';
-import { normalizedTmpdir, safeExecSync, toForwardSlash, safePath } from '@vibe-agent-toolkit/utils';
+import { ExitCode } from '@vibe-agent-toolkit/schema';
+import { direntKindFollowingSync, isPathAbsentError, isSingleFsSegment, normalizedTmpdir, toForwardSlash, safePath } from '@vibe-agent-toolkit/utils';
+import { safeExecSync } from '@vibe-agent-toolkit/utils/process';
 import AdmZip from 'adm-zip';
 import { Command } from 'commander';
 import * as tar from 'tar';
@@ -28,16 +30,18 @@ import { detectSource, downloadNpmPackage, isGlobalNpmInstall, readPackageJsonVa
 const PLUGIN_MARKETPLACES_SUBPATH = safePath.join('dist', '.claude', 'plugins', 'marketplaces');
 const PACKAGE_JSON = 'package.json';
 /**
- * List immediate subdirectory names inside a directory.
+ * List immediate subdirectory names inside a directory, following links.
  * Returns empty array when the directory does not exist.
+ *
+ * Followed on purpose: a `--dev` install puts a plugin or marketplace here AS
+ * a symlink, and `Dirent.isDirectory()` is false for a link — so every dev
+ * install was invisible to the listing that uninstalls, lists and re-installs.
  */
 function listSubdirectories(dir) {
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller validates dir
     if (!existsSync(dir))
         return [];
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- caller validates dir
     return readdirSync(dir, { withFileTypes: true })
-        .filter(d => d.isDirectory())
+        .filter(d => direntKindFollowingSync(dir, d) === 'directory')
         .map(d => d.name);
 }
 /**
@@ -64,13 +68,12 @@ async function registerPlugin(mpName, pluginName, pluginDir, version, packageNam
  * Shared between npm and local install paths to avoid duplication.
  */
 async function installPluginTreeAndExit(rootDir, marketplacesDir, sourceLabel, sourceType, startTime, logger, dryRun) {
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- rootDir from controlled source
     const pkgRaw = readFileSync(safePath.join(rootDir, PACKAGE_JSON), 'utf-8');
     const packageJson = JSON.parse(pkgRaw);
     const installedSkills = await copyPluginTree(marketplacesDir, packageJson, logger, dryRun);
     const duration = Date.now() - startTime;
     outputInstallSuccess(installedSkills, sourceLabel, sourceType, duration, logger, dryRun);
-    process.exit(0);
+    process.exit(ExitCode.OK);
 }
 /**
  * Convert a skill name to a filesystem-safe path segment.
@@ -79,6 +82,24 @@ async function installPluginTreeAndExit(rootDir, marketplacesDir, sourceLabel, s
 function skillNameToFsPath(name) {
     return name.replaceAll(':', '__');
 }
+/**
+ * A name about to become `join(skillsDir, name)` on a path that is deleted
+ * or overwritten. Refused unless it is ONE entry name — the sweep installed a
+ * SKILL.md declaring `name: ../victim` and watched `--force` delete
+ * `<skillsDir>/../victim`, exit 0, `status: success`.
+ *
+ * @param name - The declared name, exactly as it arrived
+ * @param origin - What declared it, for the refusal's wording
+ * @returns `name`, unchanged, when it is a single segment
+ * @throws When it is not
+ */
+export function assertSkillEntryName(name, origin) {
+    if (!isSingleFsSegment(name)) {
+        throw new Error(`Refusing to install "${name}" (${origin}): a skill name must be a single path segment ` +
+            `(no separators, not "." or "..").`);
+    }
+    return name;
+}
 export function createPluginInstallCommand() {
     const command = new Command('install');
     command
@@ -142,7 +163,7 @@ async function installCommand(source, options) {
             process.stdout.write(`reason: "claude.ai org provisioning API not yet confirmed as public"\n`);
             process.stdout.write(`requestedTarget: claude.ai\n`);
             process.stdout.write(`guidance: "Use claude.ai admin console to upload a .zip manually, or use --target api.anthropic.com for workspace-scoped skill management"\n`);
-            process.exit(1);
+            process.exit(ExitCode.ERROR);
         }
         // Handle --build (implies --dev)
         if (options.build) {
@@ -209,7 +230,6 @@ async function handleNpmInstall(source, options, logger, startTime) {
         const extractedPath = downloadNpmPackage(packageName, tempDir);
         // If the package ships a pre-built plugin tree, install via dumb copy.
         const marketplacesDir = safePath.join(extractedPath, PLUGIN_MARKETPLACES_SUBPATH);
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- path from controlled extractedPath + constant subpath
         const hasPlugin = !options.userInstallWithoutPlugin && existsSync(marketplacesDir);
         if (hasPlugin) {
             logger.info('   Plugin detected — installing via Claude plugin system');
@@ -238,7 +258,7 @@ async function handleNpmInstall(source, options, logger, startTime) {
             name,
             installPath: safePath.join(skillsDir, name),
         })), `npm:${packageName}`, 'npm', duration, logger, options.dryRun);
-        process.exit(0);
+        process.exit(ExitCode.OK);
     }
     finally {
         await rm(tempDir, { recursive: true, force: true });
@@ -253,13 +273,11 @@ async function handleLocalInstall(source, options, logger, startTime) {
     const skillsDir = options.skillsDir ?? getClaudeUserPaths().skillsDir;
     // Check for pre-built plugin tree first
     const marketplacesDir = safePath.join(sourcePath, PLUGIN_MARKETPLACES_SUBPATH);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- User-provided CLI argument
     if (!options.userInstallWithoutPlugin && existsSync(marketplacesDir)) {
         await installPluginTreeAndExit(sourcePath, marketplacesDir, `local:${sourcePath}`, 'local', startTime, logger, options.dryRun);
     }
     // Check if directory contains package.json with vat.skills
     const packageJsonPath = safePath.join(sourcePath, 'package.json');
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- User-provided CLI argument
     const hasPackageJson = existsSync(packageJsonPath);
     let installed;
     if (hasPackageJson) {
@@ -287,7 +305,7 @@ async function handleLocalInstall(source, options, logger, startTime) {
     }
     const duration = Date.now() - startTime;
     outputInstallSuccess(installed, `local:${sourcePath}`, 'local', duration, logger, options.dryRun);
-    process.exit(0);
+    process.exit(ExitCode.OK);
 }
 /**
  * Handle ZIP file installation
@@ -295,7 +313,6 @@ async function handleLocalInstall(source, options, logger, startTime) {
 async function handleZipInstall(source, options, logger, startTime) {
     const sourcePath = safePath.resolve(source);
     logger.info(`📥 Installing skill from ZIP: ${sourcePath}`);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- User-provided CLI argument
     if (!existsSync(sourcePath)) {
         throw new Error(`ZIP file not found: ${sourcePath}`);
     }
@@ -304,12 +321,11 @@ async function handleZipInstall(source, options, logger, startTime) {
     if (!options.dryRun) {
         logger.info('   Extracting ZIP...');
         const zip = new AdmZip(sourcePath);
-        // eslint-disable-next-line sonarjs/no-unsafe-unzip -- User-provided local files, isolated plugin directory
         zip.extractAllTo(installPath, /* overwrite */ true);
     }
     const duration = Date.now() - startTime;
     outputInstallSuccess([{ name: skillName, installPath }], sourcePath, 'zip', duration, logger, options.dryRun);
-    process.exit(0);
+    process.exit(ExitCode.OK);
 }
 /**
  * Handle npm tarball (.tgz / .tar.gz) installation.
@@ -319,7 +335,6 @@ async function handleZipInstall(source, options, logger, startTime) {
 async function handleTgzInstall(source, options, logger, startTime) {
     const sourcePath = safePath.resolve(source);
     logger.info(`📥 Installing skill from tarball: ${sourcePath}`);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- User-provided CLI argument
     if (!existsSync(sourcePath)) {
         throw new Error(`Tarball not found: ${sourcePath}`);
     }
@@ -329,11 +344,9 @@ async function handleTgzInstall(source, options, logger, startTime) {
         await tar.extract({ file: sourcePath, cwd: tempDir });
         // npm pack tarballs extract under package/ subdirectory
         const packageDir = safePath.join(tempDir, 'package');
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- tempDir is controlled
         const extractedDir = existsSync(packageDir) ? packageDir : tempDir;
         // Delegate to local install logic
         const marketplacesDir = safePath.join(extractedDir, PLUGIN_MARKETPLACES_SUBPATH);
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- tempDir is controlled
         if (!options.userInstallWithoutPlugin && existsSync(marketplacesDir)) {
             await installPluginTreeAndExit(extractedDir, marketplacesDir, sourcePath, 'tgz', startTime, logger, options.dryRun);
         }
@@ -347,7 +360,7 @@ async function handleTgzInstall(source, options, logger, startTime) {
         }
         const duration = Date.now() - startTime;
         outputInstallSuccess(skillNames.map(name => ({ name, installPath: safePath.join(skillsDir, name) })), sourcePath, 'tgz', duration, logger, options.dryRun);
-        process.exit(0);
+        process.exit(ExitCode.OK);
     }
     finally {
         await rm(tempDir, { recursive: true, force: true });
@@ -358,22 +371,23 @@ async function handleTgzInstall(source, options, logger, startTime) {
  * Throws if the path exists and --force was not passed.
  */
 async function prepareDevSymlinkDest(destPath, skillFsName, options) {
+    // The probe is the ONLY thing whose failure may read as "nothing there". A
+    // refusal on the probe, or a failed removal, stays loud: this used to catch
+    // everything and recognise its own throw by the words in its message.
     try {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
         lstatSync(destPath);
-        if (!options.force) {
-            throw new Error(`Skill "${skillFsName}" already installed at ${destPath}.\n` +
-                `Use --force to overwrite.`);
-        }
-        if (!options.dryRun) {
-            await rm(destPath, { recursive: true, force: true });
-        }
     }
     catch (error) {
-        if (error instanceof Error && error.message.includes('already installed')) {
-            throw error;
-        }
-        // Does not exist — that's fine
+        if (isPathAbsentError(error))
+            return;
+        throw error;
+    }
+    if (!options.force) {
+        throw new Error(`Skill "${skillFsName}" already installed at ${destPath}.\n` +
+            `Use --force to overwrite.`);
+    }
+    if (!options.dryRun) {
+        await rm(destPath, { recursive: true, force: true });
     }
 }
 /**
@@ -383,15 +397,34 @@ async function prepareDevSymlinkDest(destPath, skillFsName, options) {
 async function symlinkDevSkill(skillFsName, destSkillsDir, cwd, pluginName, options, logger) {
     const srcSkillPath = safePath.resolve(cwd, 'dist', 'skills', skillFsName);
     const destSkillPath = safePath.join(destSkillsDir, skillFsName);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
     if (!existsSync(srcSkillPath)) {
         logger.info(`   Warning: skill not built at ${srcSkillPath} — skipping symlink`);
         return null;
     }
     await prepareDevSymlinkDest(destSkillPath, skillFsName, options);
     if (!options.dryRun) {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
-        await symlink(srcSkillPath, destSkillPath, 'dir');
+        try {
+            // eslint-disable-next-line local/no-bare-symlink-in-tests -- eyes open: `handleDevInstall` refuses win32 upstream, so the Windows privilege hazard the rule names cannot be reached here.
+            await symlink(srcSkillPath, destSkillPath, 'dir');
+        }
+        catch (error) {
+            // ⚠️ POSIX-only in practice: `handleDevInstall` throws on win32 before
+            // this call chain begins, so Windows-specific handling here would be dead
+            // code — an earlier revision added exactly that. Making `--dev` work on
+            // Windows means changing that guard (a junction needs no elevation), not
+            // this catch. Not falling back to a copy either — dev mode exists so a
+            // rebuild is picked up live, and a copy would quietly stop that.
+            //
+            // ⚠️ This throws mid-loop, after `devInstallMarketplace` already removed
+            // the previous marketplace directory and `devInstallPlugin` copied the
+            // non-skill content. Earlier skills are linked, later ones are not, and
+            // `registerPlugin` never runs — so the tree is on disk but unregistered.
+            // Recoverable by re-running, which starts over.
+            const detail = error instanceof Error ? error.message : String(error);
+            throw new Error(`Could not symlink ${skillFsName} to ${destSkillPath}: ${detail}\n` +
+                'Check that the destination directory is writable. This install is now ' +
+                'incomplete — re-run the same command to start over.');
+        }
     }
     logger.info(`   Symlinked: ${safePath.relative(cwd, destSkillPath)} → ${srcSkillPath}`);
     return {
@@ -406,17 +439,16 @@ async function symlinkDevSkill(skillFsName, destSkillsDir, cwd, pluginName, opti
 async function symlinkPluginSkills(srcPluginDir, destPluginDir, pluginName, cwd, options, logger) {
     const installed = [];
     const srcSkillsDir = safePath.join(srcPluginDir, 'skills');
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
     if (!existsSync(srcSkillsDir)) {
         return installed;
     }
     const destSkillsDir = safePath.join(destPluginDir, 'skills');
     if (!options.dryRun) {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
         await mkdir(destSkillsDir, { recursive: true });
     }
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
-    const skillEntries = readdirSync(srcSkillsDir, { withFileTypes: true }).filter(d => d.isDirectory());
+    // Followed: a skill directory that is itself a link is still a skill to link.
+    const skillEntries = readdirSync(srcSkillsDir, { withFileTypes: true })
+        .filter(d => direntKindFollowingSync(srcSkillsDir, d) === 'directory');
     for (const skillEntry of skillEntries) {
         const result = await symlinkDevSkill(skillEntry.name, destSkillsDir, cwd, pluginName, options, logger);
         if (result) {
@@ -431,11 +463,9 @@ async function symlinkPluginSkills(srcPluginDir, destPluginDir, pluginName, cwd,
 async function devInstallPlugin(ctx, cwd, options, logger) {
     const { mpName, pluginName, srcPluginDir, destPluginDir, packageName, version, paths } = ctx;
     if (!options.dryRun) {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
         await mkdir(destPluginDir, { recursive: true });
     }
     // Copy non-skill entries (e.g. .claude-plugin/)
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
     for (const entry of readdirSync(srcPluginDir, { withFileTypes: true })) {
         if (entry.name !== 'skills' && !options.dryRun) {
             const srcEntry = safePath.join(srcPluginDir, entry.name);
@@ -459,12 +489,10 @@ async function devInstallMarketplace(mpName, srcMpDir, packageInfo, cwd, options
     const installed = [];
     if (!options.dryRun) {
         await rm(destMpDir, { recursive: true, force: true });
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
         await mkdir(destMpDir, { recursive: true });
     }
     logger.info(`   Marketplace: ${mpName} → ${destMpDir}`);
     // Copy non-plugin content (e.g. .claude-plugin/marketplace.json)
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- controlled path
     for (const entry of readdirSync(srcMpDir, { withFileTypes: true })) {
         if (entry.name !== 'plugins' && !options.dryRun) {
             const srcEntry = safePath.join(srcMpDir, entry.name);
@@ -510,13 +538,11 @@ async function handleDevInstall(options, logger, startTime) {
     }
     // Check for pre-built plugin tree
     const marketplacesDir = safePath.join(cwd, PLUGIN_MARKETPLACES_SUBPATH);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- cwd from CLI option or process.cwd()
     if (!existsSync(marketplacesDir)) {
         throw new Error(`Plugin tree not found at ${marketplacesDir}\n` +
             `Run: vat build first (builds the plugin tree)`);
     }
     // Read package.json for package name/version
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- cwd from CLI option or process.cwd()
     const pkgRaw = readFileSync(safePath.join(cwd, PACKAGE_JSON), 'utf-8');
     const packageJson = JSON.parse(pkgRaw);
     logger.info(`📥 Dev-installing plugin tree from ${packageJson.name}`);
@@ -535,7 +561,7 @@ async function handleDevInstall(options, logger, startTime) {
     }
     const duration = Date.now() - startTime;
     outputDevSuccess(installed, packageJson.name, duration, logger, options.dryRun);
-    process.exit(0);
+    process.exit(ExitCode.OK);
 }
 /**
  * Shell out to vat build (skills + claude plugin tree)
@@ -556,16 +582,14 @@ async function handleNpmPostinstall(options, logger, startTime) {
     logger.info(`📥 Running npm postinstall hook`);
     if (!isGlobalNpmInstall()) {
         logger.info('   Skipping: Not a global npm install');
-        process.exit(0);
+        process.exit(ExitCode.OK);
     }
     const cwd = process.cwd();
     // Check for pre-built plugin tree (dist/.claude/plugins/marketplaces/)
     const marketplacesDir = safePath.join(cwd, PLUGIN_MARKETPLACES_SUBPATH);
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- path constructed from validated cwd and constant subpath
     const hasPluginTree = existsSync(marketplacesDir);
     if (!options.userInstallWithoutPlugin) {
         if (hasPluginTree) {
-            // eslint-disable-next-line security/detect-non-literal-fs-filename -- path constructed from validated cwd and constant package.json name
             const pkgRaw = readFileSync(safePath.join(cwd, PACKAGE_JSON), 'utf-8');
             const packageJson = JSON.parse(pkgRaw);
             logger.info(`   Package: ${packageJson.name}@${packageJson.version ?? 'unknown'}`);
@@ -580,7 +604,7 @@ async function handleNpmPostinstall(options, logger, startTime) {
             logger.info(`   Run 'vat build' to generate plugin artifacts before publishing.`);
             logger.info(`   Skipping install — no skills registered.`);
         }
-        process.exit(0);
+        process.exit(ExitCode.OK);
     }
     // --user-install-without-plugin: install skills directly to ~/.claude/skills/
     const { packageJson, skills } = await readPackageJsonVatMetadata(cwd);
@@ -593,7 +617,7 @@ async function handleNpmPostinstall(options, logger, startTime) {
     const duration = Date.now() - startTime;
     logger.info(`✅ Installed ${skills.length} skill(s) from ${packageJson.name}`);
     logger.info(`   Duration: ${duration}ms`);
-    process.exit(0);
+    process.exit(ExitCode.OK);
 }
 /**
  * Execute vat.replaces cleanup before installing the new plugin.
@@ -630,15 +654,21 @@ export async function executeReplaces(replaces, marketplaceNames, paths, dryRun,
     await removeOldPlugins(replaces.plugins, marketplaceNames, paths, dryRun, logger);
     // Remove legacy flat-skill installs from ~/.claude/skills/<name>
     for (const skillName of replaces.flatSkills ?? []) {
-        const skillPath = safePath.join(paths.skillsDir, skillName);
+        // The entry comes from the INSTALLED package's package.json, and this is
+        // an `rm -rf` with no flag in front of it: `"../victim"` used to remove a
+        // sibling of the skills dir (with the default paths, `"../.."` is $HOME).
+        const skillPath = safePath.join(paths.skillsDir, assertSkillEntryName(skillName, 'vat.replaces.flatSkills'));
         let pathExists = false;
         try {
-            // eslint-disable-next-line security/detect-non-literal-fs-filename -- derived from Claude user paths + skill name
             lstatSync(skillPath); // throws if path itself doesn't exist (doesn't follow symlinks)
             pathExists = true;
         }
-        catch {
-            // path doesn't exist or is inaccessible — nothing to remove
+        catch (error) {
+            // Path doesn't exist — nothing to remove. One the OS refuses to examine
+            // is not "nothing to remove": the legacy install is still there and a
+            // silent skip leaves it beside its replacement.
+            if (!isPathAbsentError(error))
+                throw error;
         }
         if (pathExists) {
             if (dryRun) {
@@ -673,7 +703,6 @@ async function copyPluginTree(marketplacesDir, packageJson, logger, dryRun) {
         // package do not persist in the user's Claude installation.
         logger.info(`   Copying marketplace: ${mpName} → ${destMpDir}`);
         await rm(destMpDir, { recursive: true, force: true });
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- Resolved from constant subpath
         await mkdir(destMpDir, { recursive: true });
         cpSync(srcMpDir, destMpDir, { recursive: true, force: true });
         // Register each plugin and collect installed skill names
@@ -696,15 +725,19 @@ async function copyPluginTree(marketplacesDir, packageJson, logger, dryRun) {
  */
 async function prepareInstallation(skillName, options) {
     const skillsDir = options.skillsDir ?? getClaudeUserPaths().skillsDir;
-    const installPath = safePath.join(skillsDir, skillName);
+    // The declared name is author-controlled (SKILL.md `name:`, package.json
+    // `vat.skills[]`) and `--force` turns this path into an `rm -rf`.
+    const installPath = safePath.join(skillsDir, assertSkillEntryName(skillName, 'skill name'));
     let exists = false;
     try {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- Install path from config
         lstatSync(installPath);
         exists = true;
     }
-    catch {
-        // Does not exist
+    catch (error) {
+        // Does not exist. A refusal is not that: it used to read as "free", and
+        // the extraction that followed then met the same refusal without a name.
+        if (!isPathAbsentError(error))
+            throw error;
     }
     if (exists && !options.force) {
         throw new Error(`Skill already exists at ${installPath}. Use --force to overwrite.`);
@@ -713,7 +746,6 @@ async function prepareInstallation(skillName, options) {
         await rm(installPath, { recursive: true, force: true });
     }
     if (!options.dryRun) {
-        // eslint-disable-next-line security/detect-non-literal-fs-filename -- Skills directory path, safe
         await mkdir(skillsDir, { recursive: true });
     }
     return { skillsDir, installPath };
@@ -722,7 +754,6 @@ async function prepareInstallation(skillName, options) {
  * Install skill from a path to plugins directory
  */
 async function installSkillFromPath(skillPath, skillName, options, logger) {
-    // eslint-disable-next-line security/detect-non-literal-fs-filename -- Validated path
     if (!existsSync(skillPath)) {
         throw new Error(`Skill path not found: ${skillPath}`);
     }