askill-cli 0.1.4 → 0.1.5

package/README.md

@@ -58,9 +58,9 @@ After installation, read the skill's `SKILL.md` file for usage instructions. Ski
 
 ---
 
-askill is a universal package manager for AI agent skills. It enables agents to discover, install, and use skills across Claude Code, Cursor, Windsurf, and 40+ other AI coding assistants.
+askill is a universal package manager for AI agent skills. It enables agents to discover, install, and use skills across Claude Code, Codex, OpenCode, OpenClaw, Cursor, and 40+ other AI coding assistants.
 
-Every skill on [askill.sh](https://askill.sh) is automatically reviewed by AI across 5 quality dimensions — safety, clarity, reusability, completeness, and actionability — so you can evaluate quality before you install.
+Every skill on [askill.sh](https://askill.sh) is automatically reviewed by AI across 5 strict dimensions - Safety, Clarity, Reusability, Completeness, and Actionability - so risky or malicious skills are filtered out, and truly excellent skills rise to the top of the rankings.
 
 ## Quick Start
 

package/dist/cli.mjs

@@ -4,7 +4,7 @@
 import { homedir } from "os";
 import { join } from "path";
 import { existsSync } from "fs";
-var VERSION = "0.1.4";
+var VERSION = "0.1.5";
 var API_BASE_URL = "https://askill.sh/api/v1";
 var REGISTRY_URL = "https://askill.sh";
 var RESET = "\x1B[0m";
@@ -419,11 +419,13 @@ var APIClient = class {
    * Publish a skill from local content or GitHub URL
    */
   async publish(payload) {
+    const headers = {};
+    if (payload.token) {
+      headers.Authorization = `Bearer ${payload.token}`;
+    }
     return this.fetch("/publish", {
       method: "POST",
-      headers: {
-        Authorization: `Bearer ${payload.token}`
-      },
+      headers,
       body: JSON.stringify({
         content: payload.content,
         githubUrl: payload.githubUrl
@@ -1523,7 +1525,7 @@ function showBanner() {
   console.log(`  ${DIM}$${RESET} askill init${RESET}              ${DIM}Create a new skill${RESET}`);
   console.log(`  ${DIM}$${RESET} askill submit ${DIM}<url>${RESET}   ${DIM}Submit GitHub skill URL${RESET}`);
   console.log(`  ${DIM}$${RESET} askill login${RESET}             ${DIM}Login with API token${RESET}`);
-  console.log(`  ${DIM}$${RESET} askill publish${RESET}           ${DIM}Publish a skill${RESET}`);
+  console.log(`  ${DIM}$${RESET} askill publish${RESET}           ${DIM}Publish to @author/slug${RESET}`);
   console.log(`  ${DIM}$${RESET} askill run ${DIM}<skill:cmd>${RESET}  ${DIM}Run a skill command${RESET}`);
   console.log();
   console.log(`${DIM}Browse skills at${RESET} ${CYAN}https://askill.sh${RESET}`);
@@ -1547,8 +1549,8 @@ ${BOLD}Commands:${RESET}
   login [--token <token>]  Login with API token
   logout                   Clear saved API token
   whoami                   Show current authenticated user
-  publish [path]           Publish SKILL.md from local path
-  publish --github <url>   Publish SKILL.md from GitHub URL
+  publish [path]           Publish local SKILL.md (login required)
+  publish --github <url>   Publish GitHub SKILL.md (author=repo owner)
   run <skill:cmd>          Run a skill command
   upgrade                  Update askill CLI to latest version
 
@@ -1822,11 +1824,12 @@ Usage:
   askill publish --github <blob-url-to-SKILL.md>
 
 Description:
-  Publish a skill under your author scope (@author/skill-name).
+  Publish a skill to canonical slug @author/slug.
 
-Requirements:
-  - Logged in via askill login
-  - SKILL.md contains valid name and semver version
+Rules:
+  - SKILL.md must include valid frontmatter fields: name, slug, version
+  - Local publish requires askill login token (author is your GitHub user)
+  - --github publish uses repository owner as author and does not require login
 
 Examples:
   askill publish
@@ -3356,11 +3359,6 @@ async function runWhoami() {
   }
 }
 async function runPublish(args) {
-  const creds = await loadCredentials();
-  if (!creds?.token) {
-    p.log.error("Not logged in. Run askill login first.");
-    process.exit(1);
-  }
   const githubFlagIndex = args.findIndex((a) => a === "--github");
   const githubUrl = githubFlagIndex >= 0 ? args[githubFlagIndex + 1] : void 0;
   const localPath = args.find((a) => !a.startsWith("-")) || ".";
@@ -3393,11 +3391,22 @@ async function runPublish(args) {
   }
   const parsed = parseSkillMd(content);
   const name = typeof parsed.frontmatter.name === "string" ? parsed.frontmatter.name.trim() : "";
+  const slug = typeof parsed.frontmatter.slug === "string" ? parsed.frontmatter.slug.trim() : "";
   const version = typeof parsed.frontmatter.version === "string" ? parsed.frontmatter.version.trim() : "";
   if (!name) {
     p.log.error("SKILL.md must include frontmatter name");
     process.exit(1);
   }
+  if (!slug) {
+    p.log.error("SKILL.md must include frontmatter slug");
+    p.log.info("Add slug using lowercase letters, numbers, and hyphens (example: slug: my-skill)");
+    process.exit(1);
+  }
+  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(slug)) {
+    p.log.error(`Invalid slug in SKILL.md: "${slug}"`);
+    p.log.info("Expected format: lowercase letters, numbers, hyphens (example: my-skill)");
+    process.exit(1);
+  }
   if (!version) {
     p.log.error('SKILL.md is missing frontmatter field "version".');
     p.log.info("Add a semver version, for example: version: 0.1.0");
@@ -3415,8 +3424,14 @@ async function runPublish(args) {
   const spinner2 = p.spinner();
   spinner2.start("Publishing skill...");
   try {
+    const creds = githubUrl ? null : await loadCredentials();
+    if (!githubUrl && !creds?.token) {
+      spinner2.stop(pc.red("Publish failed"));
+      p.log.error("Not logged in. Run askill login first for local publish.");
+      process.exit(1);
+    }
     const result = await api.publish({
-      token: creds.token,
+      token: creds?.token,
       githubUrl,
       content: githubUrl ? void 0 : content
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "askill-cli",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "askill - The Agent Skill Package Manager",
   "type": "module",
   "bin": {