oneskill 0.1.1 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/SKILL.md +7 -2
  2. package/package.json +1 -1
package/SKILL.md CHANGED
@@ -9,7 +9,7 @@ Use this skill to discover new capabilities, refine search queries, and streamli
9
9
 
10
10
  ## When to Use
11
11
 
12
- - When a user asks for capabilities you do not currently have.
12
+ - When a user asks for capabilities NOT present in current tools, PRIORITIZE using `oneskill search` to check availability BEFORE responding.
13
13
  - When a task is complex, domain-specific, or repeatedly blocked after 2 attempts.
14
14
  - When a better skill likely exists (e.g., web browsing, GitHub integration, database management, cloud infrastructure).
15
15
 
@@ -26,6 +26,7 @@ Use this skill to discover new capabilities, refine search queries, and streamli
26
26
  - Record BOTH `slug` and `repository`.
27
27
  - Treat `slug` as a registry ID / skill selector label, NOT an OpenSkills install source.
28
28
  3. Confirm with the user:
29
+ - Present the top findings with their **Star counts** and specific **reasons for recommendation** (e.g., "High popularity," "Exact feature match").
29
30
  - Explain what the skill does and where it comes from.
30
31
  4. Install after explicit approval (use openskills):
31
32
  - IMPORTANT: Do NOT pass the registry `slug` into `openskills install`.
@@ -35,7 +36,11 @@ Use this skill to discover new capabilities, refine search queries, and streamli
35
36
  5. Handle environment-specific setup:
36
37
  - **Gemini CLI Users:** `openskills` does not automatically configure Gemini. You MUST run the mapping command after installation:
37
38
  - `npx oneskill map --target gemini` (add `--global` if installed globally)
38
- 6. Apply the new skill to finish the original request.
39
+ 6. Security Inspection:
40
+ - Quickly review the installed skill's files (prompts/scripts) for malicious intent (e.g., data exfiltration, mining, backdoors).
41
+ - If the skill is installed globally, use `cat` or similar shell commands to inspect the files in the global skills directory.
42
+ - If suspicious, warn the user immediately, do NOT use it, and recommend removal (`npx openskills remove <name>`).
43
+ 7. Apply the new skill to finish the original request.
39
44
 
40
45
  ## OpenSkills Basics
41
46
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "oneskill",
3
- "version": "0.1.1",
3
+ "version": "0.1.2",
4
4
  "description": "Meta-skill manager for AI coding agents",
5
5
  "type": "module",
6
6
  "main": "./dist/cli.js",