agent-skill-manager 1.19.0 → 1.20.0

package/README.md

@@ -61,7 +61,7 @@ The more AI agents you use, the worse this gets. Every new tool adds another ski
 - **See everything at once** — List, search, and filter skills across all providers and scopes from one dashboard. No more `ls`-ing through hidden directories.
 - **Install from GitHub in one command** — `asm install github:user/repo` handles cloning, validation, and placement. Supports single-skill repos, multi-skill collections, subfolder URLs, and private repos via SSH.
 - **Catch problems before they bite** — Built-in security scanning flags dangerous patterns (shell execution, network access, credential exposure, obfuscation) before you install. Duplicate audit finds and cleans redundant skills across providers.
-- **Create and test skills locally** — Scaffold new skills with `asm init`, symlink them for live development with `asm link`, audit for security issues, and verify metadata — all before publishing. [See the full local dev workflow ↓](#build-test-and-ship-your-own-skills)
+- **Create, test, and publish skills** — Scaffold new skills with `asm init`, symlink them for live development with `asm link`, audit for security issues, verify metadata, and publish to the [ASM Registry](https://github.com/luongnv89/asm-registry) with a single command. [See the full local dev workflow ↓](#build-test-and-ship-your-own-skills)
 - **Works with every major agent** — 17 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, and a generic Agents provider. Add custom providers in seconds via config.
 - **Two interfaces, one tool** — Full interactive TUI with keyboard navigation, search, and detail views. Or use the CLI with `--json` for scripting and automation.
 
@@ -116,19 +116,49 @@ This creates a `my-skill/SKILL.md` with valid YAML frontmatter and a markdown te
 
 ### 2. Develop with live reload via symlink
 
-Symlink into Claude Code's skill directory:
+`asm link` creates a symlink from your local skill directory into an agent's skill folder. Because it's a symlink, every edit you make to the source is immediately visible to the agent — no reinstall needed.
+
+#### Target a specific tool
 
 ```bash
+# Link into Claude Code
 asm link ./my-skill -p claude
+
+# Link into Codex
+asm link ./my-skill -p codex
+
+# Interactive — pick the tool from a prompt
+asm link ./my-skill
 ```
 
-Or into Codex, or any other tool:
+#### Link multiple skills at once
+
+Pass several paths in a single command to link them all in one step:
 
 ```bash
-asm link ./my-skill -p codex
+asm link ./skill-a ./skill-b ./skill-c -p claude
+```
+
+You can also point at a folder that contains multiple skills (each in its own subdirectory with a `SKILL.md`):
+
+```bash
+# Link every skill found inside ./my-skills-folder
+asm link ./my-skills-folder -p claude
+```
+
+#### Override the symlink name
+
+```bash
+asm link ./my-skill --name my-alias -p claude
+```
+
+#### Force-overwrite an existing symlink
+
+```bash
+asm link ./my-skill -p claude --force
 ```
 
-Edit the source files — changes are reflected immediately in the agent. No reinstall needed. This is the fastest iteration loop for skill development.
+Edit the source files — changes are reflected immediately in the agent. This is the fastest iteration loop for skill development.
 
 ### 3. Audit your skill for security issues
 
@@ -202,6 +232,41 @@ asm install github:you/awesome-skill -p claude --yes --json
 
 This catches issues that local development misses — broken repo structure, missing files, invalid frontmatter in a clean install context.
 
+### 6. Publish to the ASM Registry
+
+Once your skill is ready and on GitHub, submit it to the [ASM Registry](https://github.com/luongnv89/asm-registry) so anyone can install it by name:
+
+```bash
+asm publish ./my-skill
+```
+
+This runs a security audit, generates a signed manifest, forks the registry, and opens a pull request automatically. Once merged, your skill is globally discoverable:
+
+```bash
+# Anyone can install it by name — no URL needed
+asm install my-skill
+```
+
+Preview what the manifest will look like before submitting:
+
+```bash
+asm publish --dry-run ./my-skill
+```
+
+Override security warnings (caution: review findings first):
+
+```bash
+asm publish --force ./my-skill
+```
+
+Skip confirmation in CI:
+
+```bash
+asm publish --yes ./my-skill
+```
+
+> **Requires:** [`gh` CLI](https://cli.github.com) authenticated with `gh auth login`. The publish command uses `gh` to fork the registry, create a branch, write the manifest, and open the PR — all without leaving your terminal.
+
 ### Typical local development workflow
 
 1. **Scaffold** — `asm init awesome-skill -p claude`
@@ -212,6 +277,7 @@ This catches issues that local development misses — broken repo structure, mis
 6. **Verify metadata** — `asm inspect awesome-skill`
 7. Push to GitHub
 8. **Verify install flow** — `asm install github:you/awesome-skill`
+9. **Publish to registry** — `asm publish ./awesome-skill`
 
 Whether you're building skills for yourself or publishing them for the community, `asm` gives you the full create → develop → audit → ship pipeline in one tool.
 
@@ -253,6 +319,60 @@ Each indexed skill in the output JSON includes `"verified": true` or `"verified"
 
 ---
 
+## ASM Registry — Install and Publish Skills by Name
+
+The [ASM Registry](https://github.com/luongnv89/asm-registry) is the curated index of community-published skills. Once a skill is listed, anyone can install it by name — no GitHub URL needed.
+
+### Install from the registry
+
+```bash
+# Install by bare name (searches the registry)
+asm install code-review
+
+# Install by scoped name (author/skill — always unambiguous)
+asm install luongnv89/code-review
+
+# Force a fresh registry fetch (bypasses the 1-hour cache)
+asm install code-review --no-cache
+```
+
+`asm install` resolves the name against the registry index, downloads the manifest, clones the exact pinned commit, and installs the skill to your agent.
+
+### Publish your skill to the registry
+
+```bash
+asm publish ./my-skill
+```
+
+The publish pipeline:
+
+1. **Validates** your `SKILL.md` frontmatter (name, description, version)
+2. **Security audit** — blocks dangerous skills automatically; warns on risky patterns
+3. **Generates a manifest** with the current commit SHA and a `skill_path` for multi-skill repos
+4. **Opens a PR** against [luongnv89/asm-registry](https://github.com/luongnv89/asm-registry) via the `gh` CLI
+
+The registry CI validates schema, checks author identity, runs a duplicate check, typosquat detection, and an independent security scan before any maintainer reviews. Once merged, the index rebuilds automatically and your skill is live.
+
+| Flag        | Description                                |
+| ----------- | ------------------------------------------ |
+| `--dry-run` | Preview the manifest without creating a PR |
+| `--force`   | Override warning-level security findings   |
+| `--yes`     | Skip the confirmation prompt               |
+| `--machine` | Output as a machine-readable JSON envelope |
+
+### How registry resolution works
+
+When you run `asm install code-review`:
+
+1. `asm` fetches the registry index (cached for 1 hour at `~/.config/agent-skill-manager/registry-cache.json`)
+2. Finds the manifest for `code-review` — including the pinned `commit` and `skill_path`
+3. Clones the repository at that exact commit and navigates to the skill subdirectory
+4. Installs as if you had run `asm install github:author/repo#commit:skill_path`
+
+If multiple authors publish a skill with the same name, `asm` shows a disambiguation prompt. Use a scoped name (`author/skill`) to skip it.
+
+---
+
 ## Get Started in 30 Seconds
 
 ### npm (recommended)
@@ -361,7 +481,7 @@ Need a tool not listed? Add a custom provider entry to the config.
 Yes. `asm` is MIT licensed and free forever. No accounts, no telemetry, no paywalls.
 
 **Is it actively maintained?**
-v1.19.0 shipped on March 28, 2026. The project has had 28 releases. Check the [changelog](docs/CHANGELOG.md) for the full history.
+v1.20.0 shipped on April 12, 2026. The project has had 29 releases. Check the [changelog](docs/CHANGELOG.md) for the full history.
 
 **Which AI agents does it support?**
 17 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, and a generic Agents provider. All 17 are enabled by default; disable any you don't need via `asm config edit`. You can also add any custom agent that stores skills as directories with a `SKILL.md` file.
@@ -413,27 +533,28 @@ asm
 
 ### Commands
 
-| Command                         | Description                                 |
-| ------------------------------- | ------------------------------------------- |
-| `asm list`                      | List all discovered skills                  |
-| `asm search <query>`            | Search by name/description/provider         |
-| `asm inspect <skill-name>`      | Show detailed info for a skill              |
-| `asm install <source>`          | Install a skill from GitHub                 |
-| `asm uninstall <skill-name>`    | Remove a skill (with confirmation)          |
-| `asm init <name>`               | Scaffold a new skill with SKILL.md template |
-| `asm link <path>`               | Symlink a local skill for live development  |
-| `asm audit`                     | Detect duplicate skills                     |
-| `asm audit security <name>`     | Run security audit on a skill               |
-| `asm stats`                     | Show aggregate skill metrics dashboard      |
-| `asm export`                    | Export skill inventory as JSON manifest     |
-| `asm index ingest <repo>`       | Index a skill repo for searching            |
-| `asm index search <query>`      | Search indexed skills                       |
-| `asm index list`                | List indexed repositories                   |
-| `asm index remove <owner/repo>` | Remove a repo from the index                |
-| `asm config show`               | Print current config                        |
-| `asm config path`               | Print config file path                      |
-| `asm config reset`              | Reset config to defaults                    |
-| `asm config edit`               | Open config in $EDITOR                      |
+| Command                         | Description                                           |
+| ------------------------------- | ----------------------------------------------------- |
+| `asm list`                      | List all discovered skills                            |
+| `asm search <query>`            | Search by name/description/provider                   |
+| `asm inspect <skill-name>`      | Show detailed info for a skill                        |
+| `asm install <source>`          | Install a skill from GitHub or the registry           |
+| `asm publish [path]`            | Publish a skill to the ASM Registry                   |
+| `asm uninstall <skill-name>`    | Remove a skill (with confirmation)                    |
+| `asm init <name>`               | Scaffold a new skill with SKILL.md template           |
+| `asm link <path> [<path2> ...]` | Symlink one or more local skills for live development |
+| `asm audit`                     | Detect duplicate skills                               |
+| `asm audit security <name>`     | Run security audit on a skill                         |
+| `asm stats`                     | Show aggregate skill metrics dashboard                |
+| `asm export`                    | Export skill inventory as JSON manifest               |
+| `asm index ingest <repo>`       | Index a skill repo for searching                      |
+| `asm index search <query>`      | Search indexed skills                                 |
+| `asm index list`                | List indexed repositories                             |
+| `asm index remove <owner/repo>` | Remove a repo from the index                          |
+| `asm config show`               | Print current config                                  |
+| `asm config path`               | Print config file path                                |
+| `asm config reset`              | Reset config to defaults                              |
+| `asm config edit`               | Open config in $EDITOR                                |
 
 ### Global Options
 
@@ -492,7 +613,11 @@ asm init my-skill -p claude
 ```
 
 ```bash
+# Link globally (available in all projects)
 asm link ./my-skill -p claude
+
+# Link multiple skills at once
+asm link ./skill-a ./skill-b -p claude
 ```
 
 ```bash