hardstop 1.4.6 → 1.4.9

package/skills/hs/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hs
-version: "1.4"
+version: "1.5"
 description: "ACTIVATE THIS SKILL FOR ANY SHELL COMMAND OR FILE READ. Check curl, wget, rm, sudo, apt, dpkg, chmod, dd, format, powershell, bash, sh. Check pipe patterns like | sh or | bash. Check shell wrappers like bash -c, xargs, find -exec. Check cloud CLI (aws, gcloud, kubectl, terraform). Check when user says sysadmin told me, Stack Overflow says, is this safe, can I run. Block reading of .env, .ssh, .aws, and credential files. This skill blocks dangerous commands and warns on risky ones. ALWAYS apply the safety protocol from this document before responding about any command."
 author: Francesco Marinoni Moretto
 license: CC-BY-4.0
@@ -12,9 +12,30 @@ triggers:
   - check command safety
 ---
 
-# Hardstop Skill v1.4
+# Hardstop Skill v1.5
 
-> **Note:** This skill complements the Hardstop plugin. The plugin provides deterministic protection via hooks; this skill provides LLM-level awareness for platforms without hook support.
+## INVOCATION INSTRUCTIONS (read first when skill is activated)
+
+When this skill is activated via the Skill tool, check the ARGUMENTS field immediately:
+
+| Argument | Action (user-requested via /hs) |
+|----------|----------------------------------|
+| `skip [n]` | `python ~/.claude/plugins/hs/commands/hs_cmd.py skip [n]` |
+| `on` / `enable` | `python ~/.claude/plugins/hs/commands/hs_cmd.py on` |
+| `off` / `disable` | `python ~/.claude/plugins/hs/commands/hs_cmd.py off` |
+| `status` | `python ~/.claude/plugins/hs/commands/hs_cmd.py status` |
+| `log` | `python ~/.claude/plugins/hs/commands/hs_cmd.py log` |
+| *(none)* | Apply the safety protocol below to evaluate the pending command |
+
+Run the corresponding command — the user has explicitly requested this action via `/hs`. The hook reads `~/.hardstop/skip_next`; if that file is not written, skips have no effect.
+
+---
+
+> **Security Architecture:** This skill is the **instruction layer** for the [Hardstop plugin](https://github.com/frmoretto/hardstop). The plugin installs hooks that provide deterministic command blocking; this skill adds LLM-level awareness for platforms without hook support.
+>
+> - The `hs_cmd.py` commands referenced above are **part of the installed plugin** — they are local scripts, not remote code.
+> - Credential paths (`~/.ssh`, `~/.aws`, `.env`, etc.) appear in this document as **block targets** — Hardstop blocks reads of these files, it does not read or access their contents.
+> - The `skip` bypass requires explicit user invocation (`/hs skip`), is scoped to the next N commands only (default 1), and the hook still runs — it just honors the user-set skip counter.
 
 **Purpose:** Protect users from dangerous AI-initiated actions. The mechanical brake for AI-generated commands.
 
@@ -61,7 +82,7 @@ User: No
 Claude: Good call. What were you trying to do? I can suggest a safer approach.
 ```
 
-**Never bypass safety checks without user permission.**
+**Never bypass safety checks without user permission.** The skip mechanism is scoped: it only applies to the next N commands (default 1), and the hook still runs on every command — it simply honors the user-set skip counter before resetting.
 
 ---
 
@@ -399,7 +420,7 @@ Instead, let me [safer approach].
 
 ## 9. Read Tool Protection (v1.3)
 
-**Hardstop now monitors file reads to prevent secrets exposure.**
+**Hardstop monitors file reads to prevent secrets exposure.** Note: Hardstop **blocks** reads of these paths — it does not read or access their contents.
 
 ### DANGEROUS Reads (Blocked)
 
@@ -505,6 +526,13 @@ If you need to read this file, use '/hs skip' first.
 
 ## Changelog
 
+### v1.5 (2026-02-22)
+- **NEW FEATURE:** Invocation Instructions — explicit instructions for executing hs_cmd.py when the skill is activated with arguments
+- Added "INVOCATION INSTRUCTIONS" section at the top of the skill (before the safety protocol)
+- Maps skill arguments (`skip`, `on`, `off`, `status`, `log`) to their corresponding Bash commands via `~/.claude/plugins/hs/commands/hs_cmd.py`
+- Fixes skip bypass not working in Claude Code VSCode extension: LLM now runs `python ~/.claude/plugins/hs/commands/hs_cmd.py skip [n]` immediately on `/hs skip` invocation
+- Ensures `~/.hardstop/skip_next` is written so the hook correctly honors the bypass counter
+
 ### v1.4 (2026-02-14)
 - **NEW FEATURE:** Blocked Command Workflow — explicit instructions for handling blocked commands
 - Added "WHEN COMMANDS ARE BLOCKED" section with 5-step workflow
@@ -565,7 +593,7 @@ Copy to your agent's skill/instruction directory.
 
 ---
 
-**Version:** 1.4
+**Version:** 1.5
 **Author:** Francesco Marinoni Moretto
 **License:** CC-BY-4.0
 **Repository:** https://github.com/frmoretto/hardstop