agent-skill-manager 1.14.0 → 1.15.1

package/README.backup.md

@@ -51,7 +51,7 @@ The more AI agents you use, the worse this gets. Every new tool adds another ski
 - **See everything at once** — List, search, and filter skills across all providers and scopes from one dashboard. No more `ls`-ing through hidden directories.
 - **Install from GitHub in one command** — `asm install github:user/repo` handles cloning, validation, and placement. Supports single-skill repos, multi-skill collections, subfolder URLs, and private repos via SSH.
 - **Catch problems before they bite** — Built-in security scanning flags dangerous patterns (shell execution, network access, credential exposure, obfuscation) before you install. Duplicate audit finds and cleans redundant skills across providers.
-- **Works with every major agent** — 15 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, and a generic Agents provider. Add custom providers in seconds via config.
+- **Works with every major agent** — 17 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, and a generic Agents provider. Add custom providers in seconds via config.
 - **Two interfaces, one tool** — Full interactive TUI with keyboard navigation, search, and detail views. Or use the CLI with `--json` for scripting and automation.
 
 <p align="center">
@@ -130,25 +130,27 @@ asm install github:anthropics/skills --all    # install everything
 
 ## Supported Agent Tools
 
-`asm` ships with **15 built-in providers**. The first 4 are enabled by default; the rest can be enabled via `asm config edit`.
-
-| Tool             | Global Path                       | Project Path            | Default  |
-| ---------------- | --------------------------------- | ----------------------- | :------: |
-| Claude Code      | `~/.claude/skills/`               | `.claude/skills/`       | enabled  |
-| Codex            | `~/.codex/skills/`                | `.codex/skills/`        | enabled  |
-| OpenClaw         | `~/.openclaw/skills/`             | `.openclaw/skills/`     | enabled  |
-| Agents (generic) | `~/.agents/skills/`               | `.agents/skills/`       | enabled  |
-| Cursor           | `~/.cursor/rules/`                | `.cursor/rules/`        | disabled |
-| Windsurf         | `~/.windsurf/rules/`              | `.windsurf/rules/`      | disabled |
-| Cline            | `~/Documents/Cline/Rules/`        | `.clinerules/`          | disabled |
-| Roo Code         | `~/.roo/rules/`                   | `.roo/rules/`           | disabled |
-| Continue         | `~/.continue/rules/`              | `.continue/rules/`      | disabled |
-| GitHub Copilot   | `~/.github/instructions/`         | `.github/instructions/` | disabled |
-| Aider            | `~/.aider/skills/`                | `.aider/skills/`        | disabled |
-| OpenCode         | `~/.config/opencode/skills/`      | `.opencode/skills/`     | disabled |
-| Zed              | `~/.config/zed/prompt_overrides/` | `.zed/rules/`           | disabled |
-| Augment          | `~/.augment/rules/`               | `.augment/rules/`       | disabled |
-| Amp              | `~/.amp/skills/`                  | `.amp/skills/`          | disabled |
+`asm` ships with **17 built-in providers**. The first 4 are enabled by default; the rest can be enabled via `asm config edit`.
+
+| Tool               | Global Path                       | Project Path            | Default  |
+| ------------------ | --------------------------------- | ----------------------- | :------: |
+| Claude Code        | `~/.claude/skills/`               | `.claude/skills/`       | enabled  |
+| Codex              | `~/.codex/skills/`                | `.codex/skills/`        | enabled  |
+| OpenClaw           | `~/.openclaw/skills/`             | `.openclaw/skills/`     | enabled  |
+| Agents (generic)   | `~/.agents/skills/`               | `.agents/skills/`       | enabled  |
+| Cursor             | `~/.cursor/rules/`                | `.cursor/rules/`        | disabled |
+| Windsurf           | `~/.windsurf/rules/`              | `.windsurf/rules/`      | disabled |
+| Cline              | `~/Documents/Cline/Rules/`        | `.clinerules/`          | disabled |
+| Roo Code           | `~/.roo/rules/`                   | `.roo/rules/`           | disabled |
+| Continue           | `~/.continue/rules/`              | `.continue/rules/`      | disabled |
+| GitHub Copilot     | `~/.github/instructions/`         | `.github/instructions/` | disabled |
+| Aider              | `~/.aider/skills/`                | `.aider/skills/`        | disabled |
+| OpenCode           | `~/.config/opencode/skills/`      | `.opencode/skills/`     | disabled |
+| Zed                | `~/.config/zed/prompt_overrides/` | `.zed/rules/`           | disabled |
+| Augment            | `~/.augment/rules/`               | `.augment/rules/`       | disabled |
+| Amp                | `~/.amp/skills/`                  | `.amp/skills/`          | disabled |
+| Gemini CLI         | `~/.gemini/skills/`               | `.gemini/skills/`       | disabled |
+| Google Antigravity | `~/.antigravity/skills/`          | `.antigravity/skills/`  | disabled |
 
 Enable a provider:
 
@@ -169,7 +171,7 @@ Yes. `asm` is MIT licensed and free forever. No accounts, no telemetry, no paywa
 v1.10.0 shipped on March 18, 2026. The project has had 10 releases in the past week. Check the [changelog](docs/CHANGELOG.md) for the full history.
 
 **Which AI agents does it support?**
-15 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, and a generic Agents provider. The first 4 are enabled by default; enable the rest via `asm config edit`. You can also add any custom agent that stores skills as directories with a `SKILL.md` file.
+17 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, and a generic Agents provider. The first 4 are enabled by default; enable the rest via `asm config edit`. You can also add any custom agent that stores skills as directories with a `SKILL.md` file.
 
 **How does it compare to managing skills manually?**
 Manual management means remembering where each agent stores skills, cloning repos by hand, checking for duplicates yourself, and having no security scanning. `asm` automates all of that with one command.
@@ -342,7 +344,7 @@ The install command clones the repository, validates `SKILL.md` files, scans for
 <details>
 <summary><strong>Configuration</strong></summary>
 
-On first run, a config file is created at `~/.config/agent-skill-manager/config.json` with 15 default providers. The first 4 are enabled; the rest are disabled until you enable them:
+On first run, a config file is created at `~/.config/agent-skill-manager/config.json` with 17 default providers. The first 4 are enabled; the rest are disabled until you enable them:
 
 ```json
 {
@@ -452,6 +454,20 @@ On first run, a config file is created at `~/.config/agent-skill-manager/config.
       "global": "~/.amp/skills",
       "project": ".amp/skills",
       "enabled": false
+    },
+    {
+      "name": "gemini",
+      "label": "Gemini CLI",
+      "global": "~/.gemini/skills",
+      "project": ".gemini/skills",
+      "enabled": false
+    },
+    {
+      "name": "antigravity",
+      "label": "Google Antigravity",
+      "global": "~/.antigravity/skills",
+      "project": ".antigravity/skills",
+      "enabled": false
     }
   ],
   "customPaths": [],

package/README.md

@@ -25,7 +25,7 @@
 <p align="center">
   <a href="#get-started-in-30-seconds"><strong>Get Started in 30 Seconds &rarr;</strong></a>
   &nbsp;&nbsp;|&nbsp;&nbsp;
-  <a href="https://luongnv.com/asm/"><strong>Browse 1,700+ Skills Online &rarr;</strong></a>
+  <a href="https://luongnv.com/asm/"><strong>Browse 2,600+ Skills Online &rarr;</strong></a>
 </p>
 
 ---
@@ -62,7 +62,7 @@ The more AI agents you use, the worse this gets. Every new tool adds another ski
 - **Install from GitHub in one command** — `asm install github:user/repo` handles cloning, validation, and placement. Supports single-skill repos, multi-skill collections, subfolder URLs, and private repos via SSH.
 - **Catch problems before they bite** — Built-in security scanning flags dangerous patterns (shell execution, network access, credential exposure, obfuscation) before you install. Duplicate audit finds and cleans redundant skills across providers.
 - **Create and test skills locally** — Scaffold new skills with `asm init`, symlink them for live development with `asm link`, audit for security issues, and verify metadata — all before publishing. [See the full local dev workflow &darr;](#build-test-and-ship-your-own-skills)
-- **Works with every major agent** — 15 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, and a generic Agents provider. Add custom providers in seconds via config.
+- **Works with every major agent** — 17 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, and a generic Agents provider. Add custom providers in seconds via config.
 - **Two interfaces, one tool** — Full interactive TUI with keyboard navigation, search, and detail views. Or use the CLI with `--json` for scripting and automation.
 
 <p align="center">
@@ -217,6 +217,42 @@ Whether you're building skills for yourself or publishing them for the community
 
 ---
 
+## Skill Verification
+
+Skills indexed by `asm` are automatically evaluated against a set of verification criteria. Skills that pass all criteria receive a **verified** badge in the catalog and `"verified": true` in the index JSON. Skills that fail any criterion are still indexed but marked as unverified.
+
+### Verification Criteria
+
+A skill must satisfy **all four** of the following to be verified:
+
+1. **Valid frontmatter** -- The SKILL.md file must contain YAML frontmatter with both a `name` and a `description` field. Empty or whitespace-only values fail this check.
+
+2. **Meaningful body content** -- The markdown body (everything after the frontmatter block) must contain at least 20 characters of instruction text. A SKILL.md that is only frontmatter with no real guidance for the agent will fail.
+
+3. **No malicious patterns** -- The full SKILL.md content is scanned for dangerous code patterns:
+   - `atob()` calls (runtime base64 decoding / obfuscation)
+   - Suspicious base64-encoded strings (40+ character base64 blocks with padding)
+   - Hex-escape sequences (4+ consecutive `\xNN` escapes)
+   - Hardcoded credentials (`API_KEY`, `SECRET_KEY`, or `PASSWORD` assignments)
+
+4. **Proper structure** -- The skill directory must exist and contain a `SKILL.md` file that the ingestion pipeline can read.
+
+### How to Reproduce Locally
+
+You can verify your skill before publishing:
+
+```bash
+# Index your repo -- verification runs automatically during ingestion
+asm index ingest github:your-user/your-repo
+
+# Check the output JSON for the verified field
+asm index search "your-skill" --json
+```
+
+Each indexed skill in the output JSON includes `"verified": true` or `"verified": false`. If verification fails, the ingestion debug log (set `ASM_DEBUG=1`) prints the specific reasons.
+
+---
+
 ## Get Started in 30 Seconds
 
 ### npm (recommended)
@@ -247,7 +283,7 @@ asm
 
 ## Open-Source Skill Collections
 
-A curated list of skill repositories you can install with a single command. Over **1,500 skills** available across these collections:
+A curated list of skill repositories you can install with a single command. Over **2,600 skills** available across these collections:
 
 > **Last updated:** 2026-03-18
 
@@ -286,25 +322,27 @@ asm install github:anthropics/skills --all
 
 ## Supported Agent Tools
 
-`asm` ships with **15 built-in providers**, all enabled by default. Disable any you don't need via `asm config edit`.
-
-| Tool             | Global Path                       | Project Path            | Default |
-| ---------------- | --------------------------------- | ----------------------- | :-----: |
-| Claude Code      | `~/.claude/skills/`               | `.claude/skills/`       | enabled |
-| Codex            | `~/.codex/skills/`                | `.codex/skills/`        | enabled |
-| OpenClaw         | `~/.openclaw/skills/`             | `.openclaw/skills/`     | enabled |
-| Agents (generic) | `~/.agents/skills/`               | `.agents/skills/`       | enabled |
-| Cursor           | `~/.cursor/rules/`                | `.cursor/rules/`        | enabled |
-| Windsurf         | `~/.windsurf/rules/`              | `.windsurf/rules/`      | enabled |
-| Cline            | `~/Documents/Cline/Rules/`        | `.clinerules/`          | enabled |
-| Roo Code         | `~/.roo/rules/`                   | `.roo/rules/`           | enabled |
-| Continue         | `~/.continue/rules/`              | `.continue/rules/`      | enabled |
-| GitHub Copilot   | `~/.github/instructions/`         | `.github/instructions/` | enabled |
-| Aider            | `~/.aider/skills/`                | `.aider/skills/`        | enabled |
-| OpenCode         | `~/.config/opencode/skills/`      | `.opencode/skills/`     | enabled |
-| Zed              | `~/.config/zed/prompt_overrides/` | `.zed/rules/`           | enabled |
-| Augment          | `~/.augment/rules/`               | `.augment/rules/`       | enabled |
-| Amp              | `~/.amp/skills/`                  | `.amp/skills/`          | enabled |
+`asm` ships with **17 built-in providers**, all enabled by default. Disable any you don't need via `asm config edit`.
+
+| Tool               | Global Path                       | Project Path            | Default |
+| ------------------ | --------------------------------- | ----------------------- | :-----: |
+| Claude Code        | `~/.claude/skills/`               | `.claude/skills/`       | enabled |
+| Codex              | `~/.codex/skills/`                | `.codex/skills/`        | enabled |
+| OpenClaw           | `~/.openclaw/skills/`             | `.openclaw/skills/`     | enabled |
+| Agents (generic)   | `~/.agents/skills/`               | `.agents/skills/`       | enabled |
+| Cursor             | `~/.cursor/rules/`                | `.cursor/rules/`        | enabled |
+| Windsurf           | `~/.windsurf/rules/`              | `.windsurf/rules/`      | enabled |
+| Cline              | `~/Documents/Cline/Rules/`        | `.clinerules/`          | enabled |
+| Roo Code           | `~/.roo/rules/`                   | `.roo/rules/`           | enabled |
+| Continue           | `~/.continue/rules/`              | `.continue/rules/`      | enabled |
+| GitHub Copilot     | `~/.github/instructions/`         | `.github/instructions/` | enabled |
+| Aider              | `~/.aider/skills/`                | `.aider/skills/`        | enabled |
+| OpenCode           | `~/.config/opencode/skills/`      | `.opencode/skills/`     | enabled |
+| Zed                | `~/.config/zed/prompt_overrides/` | `.zed/rules/`           | enabled |
+| Augment            | `~/.augment/rules/`               | `.augment/rules/`       | enabled |
+| Amp                | `~/.amp/skills/`                  | `.amp/skills/`          | enabled |
+| Gemini CLI         | `~/.gemini/skills/`               | `.gemini/skills/`       | enabled |
+| Google Antigravity | `~/.antigravity/skills/`          | `.antigravity/skills/`  | enabled |
 
 Disable a provider — opens config in `$EDITOR`, set `"enabled": false` for any provider:
 
@@ -325,7 +363,7 @@ Yes. `asm` is MIT licensed and free forever. No accounts, no telemetry, no paywa
 v1.12.0 shipped on March 23, 2026. The project has had 12 releases in the past week. Check the [changelog](docs/CHANGELOG.md) for the full history.
 
 **Which AI agents does it support?**
-15 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, and a generic Agents provider. All 15 are enabled by default; disable any you don't need via `asm config edit`. You can also add any custom agent that stores skills as directories with a `SKILL.md` file.
+17 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, and a generic Agents provider. All 17 are enabled by default; disable any you don't need via `asm config edit`. You can also add any custom agent that stores skills as directories with a `SKILL.md` file.
 
 **How does it compare to managing skills manually?**
 Manual management means remembering where each agent stores skills, cloning repos by hand, checking for duplicates yourself, and having no security scanning. `asm` automates all of that with one command.
@@ -605,7 +643,7 @@ The install command clones the repository, validates `SKILL.md` files, scans for
 <details>
 <summary><strong>Configuration</strong></summary>
 
-On first run, a config file is created at `~/.config/agent-skill-manager/config.json` with 15 default providers, all enabled:
+On first run, a config file is created at `~/.config/agent-skill-manager/config.json` with 17 default providers, all enabled:
 
 ```json
 {
@@ -715,6 +753,20 @@ On first run, a config file is created at `~/.config/agent-skill-manager/config.
       "global": "~/.amp/skills",
       "project": ".amp/skills",
       "enabled": false
+    },
+    {
+      "name": "gemini",
+      "label": "Gemini CLI",
+      "global": "~/.gemini/skills",
+      "project": ".gemini/skills",
+      "enabled": false
+    },
+    {
+      "name": "antigravity",
+      "label": "Google Antigravity",
+      "global": "~/.antigravity/skills",
+      "project": ".antigravity/skills",
+      "enabled": false
     }
   ],
   "customPaths": [],