skilldrop-cli 0.16.0 → 0.16.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skilldrop-cli",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Portable AI-agent skills for the deliverables knowledge workers ship \u2014 diagrams, ADRs, PRDs, runbooks, decks, reviews \u2014 installable into Claude Code, Cursor, Kiro, and any IDE that takes custom instructions. One command per skill or per role-based pack.",
   "author": {
     "name": "Sanjay Ananthanarayan",

package/packs/converters/skills/file-to-markdown/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "file-to-markdown",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Convert a Word document, PowerPoint deck, Excel workbook, web page, CSV, JSON, text file or PDF into clean Markdown that keeps headings, lists, tables, links, bold and italic, slide titles and speaker notes, and reports everything it dropped (images, charts, comments, formulas, tracked changes), so the content can be read, reviewed or fed to another skill. Use when the user hands over a .docx, .pptx, .xlsx, .html, .csv, .json or .pdf and says \"read this\", \"turn this into markdown\", \"extract the text\", or wants it critiqued or briefed.",
   "entrypoint": "SKILL.md",
   "deps": {

package/packs/converters/skills/file-to-markdown/scripts/to_markdown.py

@@ -56,6 +56,7 @@ class Report:
 def md_escape(text):
     text = text.replace("\\", "\\\\")
     text = re.sub(r"([*_`\[\]])", r"\\\1", text)
+    text = re.sub(r"<(?=[A-Za-z/!])", r"\\<", text)  # literal <tag> text must not read as raw HTML
     return text
 
 
@@ -330,7 +331,7 @@ def docx_to_md(path, rep):
                 if tcpr is not None and tcpr.find(W + "gridSpan") is not None:
                     row.extend([""] * (int(tcpr.find(W + "gridSpan").get(W + "val", "1")) - 1))
             rows.append(row)
-        if any(tbl.iter(W + "tbl")) and len(list(tbl.iter(W + "tbl"))) > 1:
+        if len(list(tbl.iter(W + "tbl"))) > 1:
             rep.notes.append("a nested table was flattened into its parent cell")
         rep.keep("tables")
         return md_table(rows)
@@ -339,6 +340,19 @@ def docx_to_md(path, rep):
         return "".join((n.text or "") if n.tag == W + "t" else "\t" for n in p.iter()
                        if n.tag in (W + "t", W + "tab"))
 
+    def style_name(p):
+        ppr = p.find(W + "pPr")
+        ps = ppr.find(W + "pStyle") if ppr is not None else None
+        if ps is None:
+            return ""
+        sid = ps.get(W + "val", "")
+        return styles.get(sid, (sid.lower(), None))[0]
+
+    def code_text(p):
+        """Text of a code paragraph: line breaks and tabs kept, no inline formatting or escaping."""
+        return "".join((n.text or "") if n.tag == W + "t" else "\t" if n.tag == W + "tab" else "\n"
+                       for n in p.iter() if n.tag in (W + "t", W + "tab", W + "br", W + "cr"))
+
     def run_size(p):
         """(largest font size in half-points, every text run bold?) for unstyled documents."""
         sizes, bold = [0], True
@@ -402,7 +416,19 @@ def docx_to_md(path, rep):
             if not text:
                 prev_list = False if not li else prev_list
                 continue
-            if lvl:
+            sname = "" if lvl or li else style_name(el)
+            if re.match(r"(source ?code|code|html preformatted|preformatted text|macro text)$", sname):
+                # one code block may be one paragraph with line breaks or a run of one-line paragraphs
+                if blocks and blocks[-1][0] == "code":
+                    blocks[-1] = ("code", blocks[-1][1] + "\n" + code_text(el))
+                else:
+                    blocks.append(("code", code_text(el)))
+                    rep.keep("code blocks")
+                prev_list = False
+            elif "quote" in sname or sname == "block text":
+                blocks.append(("block", "> " + text.replace("\n", "\n> ")))
+                prev_list = False
+            elif lvl:
                 rep.keep("headings")
                 blocks.append(("block", "#" * lvl + " " + text.replace("  \n", " ")))
                 prev_list = False
@@ -439,6 +465,11 @@ def docx_to_md(path, rep):
     for k, (kind, text) in enumerate(blocks):
         if k and not (kind == "list" and blocks[k - 1][0] == "list"):
             out.append("")
+        if kind == "code":
+            fence = "```"
+            while fence in text:
+                fence += "`"
+            text = fence + "\n" + text + "\n" + fence
         out.append(text)
     return "\n".join(out) + "\n"
 

package/packs/converters/skills/md-to-docx/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "md-to-docx",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Turn a Markdown draft into a Word document (.docx) that someone outside engineering can open, edit and track changes in, with real Heading styles so the navigation pane and table of contents work, live hyperlinks, numbered and bulleted lists, tables, code blocks, embedded images and optional brand fonts and colours, and a warning for everything that could not be carried over. Use when the user wants a Markdown file as a Word doc, says \"send this as a .docx\", \"convert to Word\", \"legal needs it in Word\", or \"make this editable for the client\".",
   "entrypoint": "SKILL.md",
   "deps": {

package/packs/converters/skills/md-to-docx/scripts/md_to_docx.py

@@ -34,6 +34,8 @@ WARNINGS = []
 
 def warn(line, msg):
     where = "line %d: " % line if line else ""
+    if where + msg in WARNINGS:  # a big table repeats one warning per cell; say it once
+        return
     WARNINGS.append(where + msg)
     print("WARN %s%s" % (where, msg), file=sys.stderr)
 
@@ -942,7 +944,7 @@ class Doc(object):
 
 
 def static_parts(title):
-    now = datetime.datetime.utcnow().strftime("%Y-%m-%dT%H:%M:%SZ")
+    now = datetime.datetime.now(datetime.timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
     ct = ('<?xml version="1.0" encoding="UTF-8" standalone="yes"?>\n'
           '<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types">'
           '<Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/>'

package/packs/converters/skills/md-to-xlsx/SKILL.md

@@ -78,7 +78,8 @@ nothing. Formulas stay off unless the request says otherwise, noted as an `[assu
 | Anything else, including `n/a`, `1.234,50`, `30/09/2026` | Text |
 
 In Markdown cells, `**bold**`, `` `code` ``, links and images are reduced to their text, and
-`<br>` becomes a line break inside a wrapped cell. JSON numbers and booleans keep their type.
+`<br>` becomes a line break inside a wrapped cell. JSON numbers and booleans keep their type,
+except integers over 15 digits, which become text.
 JSON strings stay text except ISO dates, because whoever produced the JSON chose a string.
 
 ## Useful references in this skill

package/packs/converters/skills/md-to-xlsx/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "md-to-xlsx",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Turn the tables in a Markdown file, a CSV or a JSON array into an Excel workbook (.xlsx) that finance, ops or a client can sort, filter and sum, with one sheet per table named from its heading, real numbers, percentages, currency and dates instead of text, a bold frozen header row with filters, sensible column widths, and formulas left inert unless asked for. Use when the user wants a spreadsheet from Markdown tables or data, says \"put this in Excel\", \"convert the CSV to xlsx\", \"give finance a spreadsheet\", or \"turn this JSON into a sheet\".",
   "entrypoint": "SKILL.md",
   "deps": {

package/packs/converters/skills/md-to-xlsx/scripts/md_to_xlsx.py

@@ -170,8 +170,11 @@ def type_text(s, formulas, stats, tz_flag, infer_numbers=True):
                         text = "0"
                     return Cell("n", text, fmt, width)
         if RE_SCI.match(s):
-            stats["numbers"] += 1
-            return Cell("n", repr(float(s)), None, width)
+            val = float(s)
+            # 1e999 overflows to inf, which is not a number Excel can read: keep it as text
+            if val == val and val not in (float("inf"), float("-inf")):
+                stats["numbers"] += 1
+                return Cell("n", num_text(val), None, width)
     if len(raw) > MAX_CELL:
         stats["truncated"] += 1
         s = s[:MAX_CELL]
@@ -189,6 +192,10 @@ def type_json(v, formulas, stats, tz_flag):
         if v != v or v in (float("inf"), float("-inf")):
             stats["text"] += 1
             return Cell("s", str(v), None, len(str(v)))
+        if isinstance(v, int) and len(str(abs(v))) > 15:
+            # Excel keeps 15 significant digits; a longer integer is an ID, and rounding it is data loss
+            stats["text"] += 1
+            return Cell("s", str(v), None, len(str(v)))
         stats["numbers"] += 1
         return Cell("n", num_text(v), None, len(num_text(v)))
     if isinstance(v, (dict, list)):
@@ -230,6 +237,9 @@ def split_row(line):
     return cells
 
 
+HTML_TAGS = [0]  # tags removed by strip_md, reported once per file
+
+
 def strip_md(s):
     """Plain text from a Markdown table cell."""
     s = re.sub(r"<br\s*/?>", "\n", s, flags=re.I)
@@ -240,7 +250,8 @@ def strip_md(s):
     s = re.sub(r"(?<![\w*])\*(?!\s)(.+?)(?<!\s)\*(?![\w*])", r"\1", s)
     s = re.sub(r"(?<!\w)_(?!\s)(.+?)(?<!\s)_(?!\w)", r"\1", s)
     s = re.sub(r"~~(.+?)~~", r"\1", s)
-    s = re.sub(r"</?[A-Za-z][^>]*>", "", s)
+    s, n = re.subn(r"</?[A-Za-z][^>]*>", "", s)
+    HTML_TAGS[0] += n
     s = re.sub(r"\\([\\`*_{}\[\]()#+\-.!|~])", r"\1", s)
     return s
 
@@ -280,6 +291,9 @@ def read_markdown(text):
             tables.append((heading, header, rows, start))
             continue
         i += 1
+    if HTML_TAGS[0]:
+        warn("%d HTML tag(s) removed from headings and cells (text between them kept); write a literal "
+             "<...> as &lt;...&gt; or in backticks to keep it" % HTML_TAGS[0])
     return tables
 
 
@@ -533,7 +547,7 @@ def write_xlsx(out, sheets, title, formulas):
                 '<bookViews><workbookView activeTab="0"/></bookViews><sheets>%s</sheets>'
                 '<definedNames>%s</definedNames>%s</workbook>') % (
                     "".join(sheet_tags), "".join(names), '<calcPr fullCalcOnLoad="1"/>' if formulas else "")
-    now = datetime.datetime.utcnow().strftime("%Y-%m-%dT%H:%M:%SZ")
+    now = datetime.datetime.now(datetime.timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
     core = ('<?xml version="1.0" encoding="UTF-8" standalone="yes"?>\n'
             '<cp:coreProperties xmlns:cp="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" '
             'xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" '

package/packs/dev-team/skills/pre-merge-review/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "pre-merge-review",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Gate an existing change for merge — run one skill that fires the whole production-readiness pass. First a deterministic mechanical gate (lint + typecheck + tests, via a script whose exit code decides), then the three-reviewer panel dispatched in parallel — devils-advocate (correctness), security-reviewer (exploitability), code-quality (craft) — then a single READY / NOT READY verdict. Use before opening a PR or merging, when you want the full review fleet run on a diff you already have. Do NOT use to implement a feature from a spec (that's feature-implement-loop) or to review a document (that's doc-critique).",
   "entrypoint": "SKILL.md",
   "deps": { "npm": [], "pip": [] },

package/packs/dev-team/skills/pre-merge-review/scripts/gate.py

@@ -112,7 +112,10 @@ def install_hook(root, cmd, config):
     body += "\n" + _hook_block(cmd, config)
     with open(path, "w", encoding="utf-8") as fh:
         fh.write(body)
-    os.chmod(path, 0o755)
+    # chmod +x, not a fixed 0o755: add execute only where the umask already granted read, so a
+    # restrictive umask (077) keeps the hook private instead of being widened to world-readable.
+    mode = os.stat(path).st_mode
+    os.chmod(path, mode | ((mode & 0o444) >> 2))
     print(f"gate: installed a blocking pre-commit hook -> {path}")
     print("      a RED gate now blocks `git commit` (any tool). Bypass once with --no-verify; "
           "wire CI required-checks for the un-bypassable backstop.")