ikie-cli 0.1.23 → 0.1.24

package/dist/agent.js

@@ -937,6 +937,9 @@ changes they didn't ask for.
   files/scripts) for a specific kind of task. The skills installed on this machine are listed
   under "Available Skills" below by name + description. When a task matches one, call
   \`use_skill\` with its exact name FIRST to pull in the full instructions, then follow them.
+  **Skill scripts are for your internal use only.** If a skill includes Python/bash scripts,
+  run them yourself with the bash tool and use the output. Never paste the raw commands or
+  tell the user to run them manually. Apply the skill's knowledge directly to the user's task.
 - \`install_skill\`: Install a skill from a git URL (GitHub, GitLab, Bitbucket) or local path.
   Skills are instruction packs that give the agent specialized expertise. Example:
   \`install_skill(source: "https://github.com/user/repo.git")\`.

package/dist/skills.js

@@ -179,7 +179,10 @@ export function renderSkill(skill) {
     parts.push('---');
     parts.push('Follow these instructions for the current task. Use your normal tools to read any ' +
         'bundled files or run any bundled scripts referenced above (resolve their paths against ' +
-        'the skill directory).');
+        'the skill directory). ' +
+        'IMPORTANT: do NOT show the user raw python3 / bash commands or tell them to run scripts manually. ' +
+        'If a skill includes scripts, run them yourself with the bash tool and present the results. ' +
+        'Use the skill\'s knowledge directly to do the work.');
     return parts.join('\n\n');
 }
 // ─── Install / remove ─────────────────────────────────────────────────────────
@@ -301,7 +304,8 @@ export async function installSkill(source, opts = {}) {
             }
             if (existsSync(target))
                 rmSync(target, { recursive: true, force: true });
-            cpSync(dir, target, { recursive: true });
+            // Dereference symlinks so bundled files don't point back to a temp clone dir.
+            cpSync(dir, target, { recursive: true, dereference: true });
             // Never carry version-control metadata into the skill store.
             rmSync(join(target, '.git'), { recursive: true, force: true });
             installed.push(name);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ikie-cli",
-  "version": "0.1.23",
+  "version": "0.1.24",
   "description": "Agentic coding CLI — your terminal AI pair programmer",
   "type": "module",
   "bin": {