skills 1.4.5 → 1.4.7

package/README.md

@@ -3,7 +3,7 @@
 The CLI for the open agent skills ecosystem.
 
 <!-- agent-list:start -->
-Supports **OpenCode**, **Claude Code**, **Codex**, **Cursor**, and [38 more](#available-agents).
+Supports **OpenCode**, **Claude Code**, **Codex**, **Cursor**, and [41 more](#available-agents).
 <!-- agent-list:end -->
 
 ## Install a Skill
@@ -39,7 +39,7 @@ npx skills add ./my-local-skills
 | Option                    | Description                                                                                                                                        |
 | ------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `-g, --global`            | Install to user directory instead of project                                                                                                       |
-| `-a, --agent <agents...>` | <!-- agent-names:start -->Target specific agents (e.g., `claude-code`, `codex`). See [Available Agents](#available-agents)<!-- agent-names:end -->                  |
+| `-a, --agent <agents...>` | <!-- agent-names:start -->Target specific agents (e.g., `claude-code`, `codex`). See [Available Agents](#available-agents)<!-- agent-names:end --> |
 | `-s, --skill <skills...>` | Install specific skills by name (use `'*'` for all skills)                                                                                         |
 | `-l, --list`              | List available skills without installing                                                                                                           |
 | `--copy`                  | Copy files instead of symlinking to agent directories                                                                                              |
@@ -210,8 +210,9 @@ Skills can be installed to any of these agents:
 | Agent | `--agent` | Project Path | Global Path |
 |-------|-----------|--------------|-------------|
 | Amp, Kimi Code CLI, Replit, Universal | `amp`, `kimi-cli`, `replit`, `universal` | `.agents/skills/` | `~/.config/agents/skills/` |
-| Antigravity | `antigravity` | `.agent/skills/` | `~/.gemini/antigravity/skills/` |
+| Antigravity | `antigravity` | `.agents/skills/` | `~/.gemini/antigravity/skills/` |
 | Augment | `augment` | `.augment/skills/` | `~/.augment/skills/` |
+| IBM Bob | `bob` | `.bob/skills/` | `~/.bob/skills/` |
 | Claude Code | `claude-code` | `.claude/skills/` | `~/.claude/skills/` |
 | OpenClaw | `openclaw` | `skills/` | `~/.openclaw/skills/` |
 | Cline, Warp | `cline`, `warp` | `.agents/skills/` | `~/.agents/skills/` |
@@ -222,7 +223,9 @@ Skills can be installed to any of these agents:
 | Cortex Code | `cortex` | `.cortex/skills/` | `~/.snowflake/cortex/skills/` |
 | Crush | `crush` | `.crush/skills/` | `~/.config/crush/skills/` |
 | Cursor | `cursor` | `.agents/skills/` | `~/.cursor/skills/` |
+| Deep Agents | `deepagents` | `.agents/skills/` | `~/.deepagents/agent/skills/` |
 | Droid | `droid` | `.factory/skills/` | `~/.factory/skills/` |
+| Firebender | `firebender` | `.agents/skills/` | `~/.firebender/skills/` |
 | Gemini CLI | `gemini-cli` | `.agents/skills/` | `~/.gemini/skills/` |
 | GitHub Copilot | `github-copilot` | `.agents/skills/` | `~/.copilot/skills/` |
 | Goose | `goose` | `.goose/skills/` | `~/.config/goose/skills/` |
@@ -317,8 +320,8 @@ The CLI searches for skills in these locations within a repository:
 - `skills/.experimental/`
 - `skills/.system/`
 - `.agents/skills/`
-- `.agent/skills/`
 - `.augment/skills/`
+- `.bob/skills/`
 - `.claude/skills/`
 - `./skills/`
 - `.codebuddy/skills/`
@@ -433,6 +436,7 @@ Telemetry is automatically disabled in CI environments.
 - [Command Code Skills Documentation](https://commandcode.ai/docs/skills)
 - [Crush Skills Documentation](https://github.com/charmbracelet/crush?tab=readme-ov-file#agent-skills)
 - [Cursor Skills Documentation](https://cursor.com/docs/context/skills)
+- [Firebender Skills Documentation](https://docs.firebender.com/multi-agent/skills)
 - [Gemini CLI Skills Documentation](https://geminicli.com/docs/cli/skills/)
 - [GitHub Copilot Agent Skills](https://docs.github.com/en/copilot/concepts/agents/about-agent-skills)
 - [iFlow CLI Skills Documentation](https://platform.iflow.cn/en/cli/examples/skill)

package/dist/cli.mjs

@@ -9,15 +9,15 @@ import { t as require_gray_matter } from "./_chunks/libs/gray-matter.mjs";
 import "./_chunks/libs/extend-shallow.mjs";
 import "./_chunks/libs/esprima.mjs";
 import { t as xdgConfig } from "./_chunks/libs/xdg-basedir.mjs";
-import { execSync, spawn, spawnSync } from "child_process";
+import { execSync, spawnSync } from "child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
 import { homedir, platform, tmpdir } from "os";
-import { createHash } from "crypto";
 import { fileURLToPath } from "url";
 import * as readline from "readline";
 import { Writable } from "stream";
 import { access, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, realpath, rm, stat, symlink, writeFile } from "fs/promises";
+import { createHash } from "crypto";
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
 function getOwnerRepo(parsed) {
 	if (parsed.type === "local") return null;
@@ -62,13 +62,48 @@ function isLocalPath(input) {
 	return isAbsolute(input) || input.startsWith("./") || input.startsWith("../") || input === "." || input === ".." || /^[a-zA-Z]:[/\\]/.test(input);
 }
 const SOURCE_ALIASES = { "coinbase/agentWallet": "coinbase/agentic-wallet-skills" };
+function decodeFragmentValue(value) {
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		return value;
+	}
+}
+function looksLikeGitSource(input) {
+	if (input.startsWith("github:") || input.startsWith("gitlab:") || input.startsWith("git@")) return true;
+	if (input.startsWith("http://") || input.startsWith("https://")) try {
+		const parsed = new URL(input);
+		const pathname = parsed.pathname;
+		if (parsed.hostname === "github.com") return /^\/[^/]+\/[^/]+(?:\.git)?(?:\/tree\/[^/]+(?:\/.*)?)?\/?$/.test(pathname);
+		if (parsed.hostname === "gitlab.com") return /^\/.+?\/[^/]+(?:\.git)?(?:\/-\/tree\/[^/]+(?:\/.*)?)?\/?$/.test(pathname);
+	} catch {}
+	if (/^https?:\/\/.+\.git(?:$|[/?])/i.test(input)) return true;
+	return !input.includes(":") && !input.startsWith(".") && !input.startsWith("/") && /^([^/]+)\/([^/]+)(?:\/(.+)|@(.+))?$/.test(input);
+}
+function parseFragmentRef(input) {
+	const hashIndex = input.indexOf("#");
+	if (hashIndex < 0) return { inputWithoutFragment: input };
+	const inputWithoutFragment = input.slice(0, hashIndex);
+	const fragment = input.slice(hashIndex + 1);
+	if (!fragment || !looksLikeGitSource(inputWithoutFragment)) return { inputWithoutFragment: input };
+	const atIndex = fragment.indexOf("@");
+	if (atIndex === -1) return {
+		inputWithoutFragment,
+		ref: decodeFragmentValue(fragment)
+	};
+	const ref = fragment.slice(0, atIndex);
+	const skillFilter = fragment.slice(atIndex + 1);
+	return {
+		inputWithoutFragment,
+		ref: ref ? decodeFragmentValue(ref) : void 0,
+		skillFilter: skillFilter ? decodeFragmentValue(skillFilter) : void 0
+	};
+}
+function appendFragmentRef(input, ref, skillFilter) {
+	if (!ref) return input;
+	return `${input}#${ref}${skillFilter ? `@${skillFilter}` : ""}`;
+}
 function parseSource(input) {
-	const alias = SOURCE_ALIASES[input];
-	if (alias) input = alias;
-	const githubPrefixMatch = input.match(/^github:(.+)$/);
-	if (githubPrefixMatch) return parseSource(githubPrefixMatch[1]);
-	const gitlabPrefixMatch = input.match(/^gitlab:(.+)$/);
-	if (gitlabPrefixMatch) return parseSource(`https://gitlab.com/${gitlabPrefixMatch[1]}`);
 	if (isLocalPath(input)) {
 		const resolvedPath = resolve(input);
 		return {
@@ -77,13 +112,21 @@ function parseSource(input) {
 			localPath: resolvedPath
 		};
 	}
+	const { inputWithoutFragment, ref: fragmentRef, skillFilter: fragmentSkillFilter } = parseFragmentRef(input);
+	input = inputWithoutFragment;
+	const alias = SOURCE_ALIASES[input];
+	if (alias) input = alias;
+	const githubPrefixMatch = input.match(/^github:(.+)$/);
+	if (githubPrefixMatch) return parseSource(appendFragmentRef(githubPrefixMatch[1], fragmentRef, fragmentSkillFilter));
+	const gitlabPrefixMatch = input.match(/^gitlab:(.+)$/);
+	if (gitlabPrefixMatch) return parseSource(appendFragmentRef(`https://gitlab.com/${gitlabPrefixMatch[1]}`, fragmentRef, fragmentSkillFilter));
 	const githubTreeWithPathMatch = input.match(/github\.com\/([^/]+)\/([^/]+)\/tree\/([^/]+)\/(.+)/);
 	if (githubTreeWithPathMatch) {
 		const [, owner, repo, ref, subpath] = githubTreeWithPathMatch;
 		return {
 			type: "github",
 			url: `https://github.com/${owner}/${repo}.git`,
-			ref,
+			ref: ref || fragmentRef,
 			subpath: subpath ? sanitizeSubpath(subpath) : subpath
 		};
 	}
@@ -93,7 +136,7 @@ function parseSource(input) {
 		return {
 			type: "github",
 			url: `https://github.com/${owner}/${repo}.git`,
-			ref
+			ref: ref || fragmentRef
 		};
 	}
 	const githubRepoMatch = input.match(/github\.com\/([^/]+)\/([^/]+)/);
@@ -101,7 +144,8 @@ function parseSource(input) {
 		const [, owner, repo] = githubRepoMatch;
 		return {
 			type: "github",
-			url: `https://github.com/${owner}/${repo.replace(/\.git$/, "")}.git`
+			url: `https://github.com/${owner}/${repo.replace(/\.git$/, "")}.git`,
+			...fragmentRef ? { ref: fragmentRef } : {}
 		};
 	}
 	const gitlabTreeWithPathMatch = input.match(/^(https?):\/\/([^/]+)\/(.+?)\/-\/tree\/([^/]+)\/(.+)/);
@@ -110,7 +154,7 @@ function parseSource(input) {
 		if (hostname !== "github.com" && repoPath) return {
 			type: "gitlab",
 			url: `${protocol}://${hostname}/${repoPath.replace(/\.git$/, "")}.git`,
-			ref,
+			ref: ref || fragmentRef,
 			subpath: subpath ? sanitizeSubpath(subpath) : subpath
 		};
 	}
@@ -120,7 +164,7 @@ function parseSource(input) {
 		if (hostname !== "github.com" && repoPath) return {
 			type: "gitlab",
 			url: `${protocol}://${hostname}/${repoPath.replace(/\.git$/, "")}.git`,
-			ref
+			ref: ref || fragmentRef
 		};
 	}
 	const gitlabRepoMatch = input.match(/gitlab\.com\/(.+?)(?:\.git)?\/?$/);
@@ -128,7 +172,8 @@ function parseSource(input) {
 		const repoPath = gitlabRepoMatch[1];
 		if (repoPath.includes("/")) return {
 			type: "gitlab",
-			url: `https://gitlab.com/${repoPath}.git`
+			url: `https://gitlab.com/${repoPath}.git`,
+			...fragmentRef ? { ref: fragmentRef } : {}
 		};
 	}
 	const atSkillMatch = input.match(/^([^/]+)\/([^/@]+)@(.+)$/);
@@ -137,16 +182,19 @@ function parseSource(input) {
 		return {
 			type: "github",
 			url: `https://github.com/${owner}/${repo}.git`,
-			skillFilter
+			...fragmentRef ? { ref: fragmentRef } : {},
+			skillFilter: fragmentSkillFilter || skillFilter
 		};
 	}
-	const shorthandMatch = input.match(/^([^/]+)\/([^/]+)(?:\/(.+))?$/);
+	const shorthandMatch = input.match(/^([^/]+)\/([^/]+)(?:\/(.+?))?\/?$/);
 	if (shorthandMatch && !input.includes(":") && !input.startsWith(".") && !input.startsWith("/")) {
 		const [, owner, repo, subpath] = shorthandMatch;
 		return {
 			type: "github",
 			url: `https://github.com/${owner}/${repo}.git`,
-			subpath: subpath ? sanitizeSubpath(subpath) : subpath
+			...fragmentRef ? { ref: fragmentRef } : {},
+			subpath: subpath ? sanitizeSubpath(subpath) : subpath,
+			...fragmentSkillFilter ? { skillFilter: fragmentSkillFilter } : {}
 		};
 	}
 	if (isWellKnownUrl(input)) return {
@@ -155,7 +203,8 @@ function parseSource(input) {
 	};
 	return {
 		type: "git",
-		url: input
+		url: input,
+		...fragmentRef ? { ref: fragmentRef } : {}
 	};
 }
 function isWellKnownUrl(input) {
@@ -533,7 +582,6 @@ async function discoverSkills(basePath, subpath, options) {
 		join(searchPath, "skills/.curated"),
 		join(searchPath, "skills/.experimental"),
 		join(searchPath, "skills/.system"),
-		join(searchPath, ".agent/skills"),
 		join(searchPath, ".agents/skills"),
 		join(searchPath, ".claude/skills"),
 		join(searchPath, ".cline/skills"),
@@ -620,7 +668,7 @@ const agents = {
 	antigravity: {
 		name: "antigravity",
 		displayName: "Antigravity",
-		skillsDir: ".agent/skills",
+		skillsDir: ".agents/skills",
 		globalSkillsDir: join(home, ".gemini/antigravity/skills"),
 		detectInstalled: async () => {
 			return existsSync(join(home, ".gemini/antigravity"));
@@ -635,6 +683,15 @@ const agents = {
 			return existsSync(join(home, ".augment"));
 		}
 	},
+	bob: {
+		name: "bob",
+		displayName: "IBM Bob",
+		skillsDir: ".bob/skills",
+		globalSkillsDir: join(home, ".bob/skills"),
+		detectInstalled: async () => {
+			return existsSync(join(home, ".bob"));
+		}
+	},
 	"claude-code": {
 		name: "claude-code",
 		displayName: "Claude Code",
@@ -725,6 +782,15 @@ const agents = {
 			return existsSync(join(home, ".cursor"));
 		}
 	},
+	deepagents: {
+		name: "deepagents",
+		displayName: "Deep Agents",
+		skillsDir: ".agents/skills",
+		globalSkillsDir: join(home, ".deepagents/agent/skills"),
+		detectInstalled: async () => {
+			return existsSync(join(home, ".deepagents"));
+		}
+	},
 	droid: {
 		name: "droid",
 		displayName: "Droid",
@@ -734,6 +800,15 @@ const agents = {
 			return existsSync(join(home, ".factory"));
 		}
 	},
+	firebender: {
+		name: "firebender",
+		displayName: "Firebender",
+		skillsDir: ".agents/skills",
+		globalSkillsDir: join(home, ".firebender/skills"),
+		detectInstalled: async () => {
+			return existsSync(join(home, ".firebender"));
+		}
+	},
 	"gemini-cli": {
 		name: "gemini-cli",
 		displayName: "Gemini CLI",
@@ -1310,6 +1385,19 @@ async function listInstalledSkills(options = {}) {
 				agentType
 			});
 		}
+		const allAgentTypes = Object.keys(agents);
+		for (const agentType of allAgentTypes) {
+			if (agentsToCheck.includes(agentType)) continue;
+			const agent = agents[agentType];
+			if (isGlobal && agent.globalSkillsDir === void 0) continue;
+			const agentDir = isGlobal ? agent.globalSkillsDir : join(cwd, agent.skillsDir);
+			if (scopes.some((s) => s.path === agentDir && s.global === isGlobal)) continue;
+			if (existsSync(agentDir)) scopes.push({
+				global: isGlobal,
+				path: agentDir,
+				agentType
+			});
+		}
 	}
 	for (const scope of scopes) try {
 		const entries = await readdir(scope.path, { withFileTypes: true });
@@ -1452,7 +1540,7 @@ new ProviderRegistryImpl();
 var WellKnownProvider = class {
 	id = "well-known";
 	displayName = "Well-Known Skills";
-	WELL_KNOWN_PATH = ".well-known/skills";
+	WELL_KNOWN_PATHS = [".well-known/agent-skills", ".well-known/skills"];
 	INDEX_FILE = "index.json";
 	match(url) {
 		if (!url.startsWith("http://") && !url.startsWith("https://")) return { matches: false };
@@ -1475,15 +1563,20 @@ var WellKnownProvider = class {
 		try {
 			const parsed = new URL(baseUrl);
 			const basePath = parsed.pathname.replace(/\/$/, "");
-			const urlsToTry = [{
-				indexUrl: `${parsed.protocol}//${parsed.host}${basePath}/${this.WELL_KNOWN_PATH}/${this.INDEX_FILE}`,
-				baseUrl: `${parsed.protocol}//${parsed.host}${basePath}`
-			}];
-			if (basePath && basePath !== "") urlsToTry.push({
-				indexUrl: `${parsed.protocol}//${parsed.host}/${this.WELL_KNOWN_PATH}/${this.INDEX_FILE}`,
-				baseUrl: `${parsed.protocol}//${parsed.host}`
-			});
-			for (const { indexUrl, baseUrl: resolvedBase } of urlsToTry) try {
+			const urlsToTry = [];
+			for (const wellKnownPath of this.WELL_KNOWN_PATHS) {
+				urlsToTry.push({
+					indexUrl: `${parsed.protocol}//${parsed.host}${basePath}/${wellKnownPath}/${this.INDEX_FILE}`,
+					baseUrl: `${parsed.protocol}//${parsed.host}${basePath}`,
+					wellKnownPath
+				});
+				if (basePath && basePath !== "") urlsToTry.push({
+					indexUrl: `${parsed.protocol}//${parsed.host}/${wellKnownPath}/${this.INDEX_FILE}`,
+					baseUrl: `${parsed.protocol}//${parsed.host}`,
+					wellKnownPath
+				});
+			}
+			for (const { indexUrl, baseUrl: resolvedBase, wellKnownPath } of urlsToTry) try {
 				const response = await fetch(indexUrl);
 				if (!response.ok) continue;
 				const index = await response.json();
@@ -1495,7 +1588,8 @@ var WellKnownProvider = class {
 				}
 				if (allValid) return {
 					index,
-					resolvedBaseUrl: resolvedBase
+					resolvedBaseUrl: resolvedBase,
+					resolvedWellKnownPath: wellKnownPath
 				};
 			} catch {
 				continue;
@@ -1526,22 +1620,23 @@ var WellKnownProvider = class {
 			const parsed = new URL(url);
 			const result = await this.fetchIndex(url);
 			if (!result) return null;
-			const { index, resolvedBaseUrl } = result;
+			const { index, resolvedBaseUrl, resolvedWellKnownPath } = result;
 			let skillName = null;
-			const pathMatch = parsed.pathname.match(/\/.well-known\/skills\/([^/]+)\/?$/);
+			const pathMatch = parsed.pathname.match(/\/.well-known\/(?:agent-skills|skills)\/([^/]+)\/?$/);
 			if (pathMatch && pathMatch[1] && pathMatch[1] !== "index.json") skillName = pathMatch[1];
 			else if (index.skills.length === 1) skillName = index.skills[0].name;
 			if (!skillName) return null;
 			const skillEntry = index.skills.find((s) => s.name === skillName);
 			if (!skillEntry) return null;
-			return this.fetchSkillByEntry(resolvedBaseUrl, skillEntry);
+			return this.fetchSkillByEntry(resolvedBaseUrl, skillEntry, resolvedWellKnownPath);
 		} catch {
 			return null;
 		}
 	}
-	async fetchSkillByEntry(baseUrl, entry) {
+	async fetchSkillByEntry(baseUrl, entry, wellKnownPath) {
 		try {
-			const skillBaseUrl = `${baseUrl.replace(/\/$/, "")}/${this.WELL_KNOWN_PATH}/${entry.name}`;
+			const resolvedPath = wellKnownPath ?? this.WELL_KNOWN_PATHS[0];
+			const skillBaseUrl = `${baseUrl.replace(/\/$/, "")}/${resolvedPath}/${entry.name}`;
 			const skillMdUrl = `${skillBaseUrl}/SKILL.md`;
 			const response = await fetch(skillMdUrl);
 			if (!response.ok) return null;
@@ -1581,8 +1676,8 @@ var WellKnownProvider = class {
 		try {
 			const result = await this.fetchIndex(url);
 			if (!result) return [];
-			const { index, resolvedBaseUrl } = result;
-			const skillPromises = index.skills.map((entry) => this.fetchSkillByEntry(resolvedBaseUrl, entry));
+			const { index, resolvedBaseUrl, resolvedWellKnownPath } = result;
+			const skillPromises = index.skills.map((entry) => this.fetchSkillByEntry(resolvedBaseUrl, entry, resolvedWellKnownPath));
 			return (await Promise.all(skillPromises)).filter((s) => s !== null);
 		} catch {
 			return [];
@@ -1592,13 +1687,14 @@ var WellKnownProvider = class {
 		try {
 			const parsed = new URL(url);
 			if (url.toLowerCase().endsWith("/skill.md")) return url;
-			const pathMatch = parsed.pathname.match(/\/.well-known\/skills\/([^/]+)\/?$/);
+			const primaryPath = this.WELL_KNOWN_PATHS[0];
+			const pathMatch = parsed.pathname.match(/\/.well-known\/(?:agent-skills|skills)\/([^/]+)\/?$/);
 			if (pathMatch && pathMatch[1]) {
-				const basePath = parsed.pathname.replace(/\/.well-known\/skills\/.*$/, "");
-				return `${parsed.protocol}//${parsed.host}${basePath}/${this.WELL_KNOWN_PATH}/${pathMatch[1]}/SKILL.md`;
+				const basePath = parsed.pathname.replace(/\/.well-known\/(?:agent-skills|skills)\/.*$/, "");
+				return `${parsed.protocol}//${parsed.host}${basePath}/${primaryPath}/${pathMatch[1]}/SKILL.md`;
 			}
 			const basePath = parsed.pathname.replace(/\/$/, "");
-			return `${parsed.protocol}//${parsed.host}${basePath}/${this.WELL_KNOWN_PATH}/${this.INDEX_FILE}`;
+			return `${parsed.protocol}//${parsed.host}${basePath}/${primaryPath}/${this.INDEX_FILE}`;
 		} catch {
 			return url;
 		}
@@ -1656,13 +1752,14 @@ function getGitHubToken() {
 	} catch {}
 	return null;
 }
-async function fetchSkillFolderHash(ownerRepo, skillPath, token) {
+async function fetchSkillFolderHash(ownerRepo, skillPath, token, ref) {
 	let folderPath = skillPath.replace(/\\/g, "/");
 	if (folderPath.endsWith("/SKILL.md")) folderPath = folderPath.slice(0, -9);
 	else if (folderPath.endsWith("SKILL.md")) folderPath = folderPath.slice(0, -8);
 	if (folderPath.endsWith("/")) folderPath = folderPath.slice(0, -1);
-	for (const branch of ["main", "master"]) try {
-		const url = `https://api.github.com/repos/${ownerRepo}/git/trees/${branch}?recursive=1`;
+	const branches = ref ? [ref] : ["main", "master"];
+	for (const branch of branches) try {
+		const url = `https://api.github.com/repos/${ownerRepo}/git/trees/${encodeURIComponent(branch)}?recursive=1`;
 		const headers = {
 			Accept: "application/vnd.github.v3+json",
 			"User-Agent": "skills-cli"
@@ -1793,7 +1890,7 @@ function createEmptyLocalLock() {
 		skills: {}
 	};
 }
-var version$1 = "1.4.5";
+var version$1 = "1.4.7";
 const isCancelled$1 = (value) => typeof value === "symbol";
 async function isSourcePrivate(source) {
 	const ownerRepo = parseOwnerRepo(source);
@@ -1964,7 +2061,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	const skills = await wellKnownProvider.fetchAllSkills(url);
 	if (skills.length === 0) {
 		spinner.stop(import_picocolors.default.red("No skills found"));
-		Se(import_picocolors.default.red("No skills found at this URL. Make sure the server has a /.well-known/skills/index.json file."));
+		Se(import_picocolors.default.red("No skills found at this URL. Make sure the server has a /.well-known/agent-skills/index.json or /.well-known/skills/index.json file."));
 		process.exit(1);
 	}
 	spinner.stop(`Found ${import_picocolors.default.green(skills.length)} skill${skills.length > 1 ? "s" : ""}`);
@@ -2625,13 +2722,14 @@ async function runAdd(args, options = {}) {
 					let skillFolderHash = "";
 					const skillPathValue = skillFiles[skill.name];
 					if (parsed.type === "github" && skillPathValue) {
-						const hash = await fetchSkillFolderHash(normalizedSource, skillPathValue, getGitHubToken());
+						const hash = await fetchSkillFolderHash(normalizedSource, skillPathValue, getGitHubToken(), parsed.ref);
 						if (hash) skillFolderHash = hash;
 					}
 					await addSkillToLock(skill.name, {
 						source: lockSource || normalizedSource,
 						sourceType: parsed.type,
 						sourceUrl: parsed.url,
+						ref: parsed.ref,
 						skillPath: skillPathValue,
 						skillFolderHash,
 						pluginName: skill.pluginName
@@ -2647,6 +2745,7 @@ async function runAdd(args, options = {}) {
 					const computedHash = await computeSkillFolderHash(skill.path);
 					await addSkillToLocalLock(skill.name, {
 						source: lockSource || parsed.url,
+						ref: parsed.ref,
 						sourceType: parsed.type,
 						computedHash
 					}, cwd);
@@ -3337,9 +3436,10 @@ async function runInstallFromLock(args) {
 			nodeModuleSkills.push(skillName);
 			continue;
 		}
-		const existing = bySource.get(entry.source);
+		const installSource = entry.ref ? `${entry.source}#${entry.ref}` : entry.source;
+		const existing = bySource.get(installSource);
 		if (existing) existing.skills.push(skillName);
-		else bySource.set(entry.source, {
+		else bySource.set(installSource, {
 			sourceType: entry.sourceType,
 			skills: [skillName]
 		});
@@ -3669,6 +3769,20 @@ function parseRemoveOptions(args) {
 		options
 	};
 }
+function formatSourceInput(sourceUrl, ref) {
+	if (!ref) return sourceUrl;
+	return `${sourceUrl}#${ref}`;
+}
+function buildUpdateInstallSource(entry) {
+	if (!entry.skillPath) return formatSourceInput(entry.sourceUrl, entry.ref);
+	let skillFolder = entry.skillPath;
+	if (skillFolder.endsWith("/SKILL.md")) skillFolder = skillFolder.slice(0, -9);
+	else if (skillFolder.endsWith("SKILL.md")) skillFolder = skillFolder.slice(0, -8);
+	if (skillFolder.endsWith("/")) skillFolder = skillFolder.slice(0, -1);
+	let installSource = skillFolder ? `${entry.source}/${skillFolder}` : entry.source;
+	if (entry.ref) installSource = `${installSource}#${entry.ref}`;
+	return installSource;
+}
 const __dirname = dirname(fileURLToPath(import.meta.url));
 function getVersion() {
 	try {
@@ -3922,7 +4036,7 @@ function printSkippedSkills(skipped) {
 	console.log(`${DIM}${skipped.length} skill(s) cannot be checked automatically:${RESET}`);
 	for (const skill of skipped) {
 		console.log(`  ${TEXT}•${RESET} ${skill.name} ${DIM}(${skill.reason})${RESET}`);
-		console.log(`    ${DIM}To update: ${TEXT}npx skills add ${skill.sourceUrl} -g -y${RESET}`);
+		console.log(`    ${DIM}To update: ${TEXT}npx skills add ${formatSourceInput(skill.sourceUrl, skill.ref)} -g -y${RESET}`);
 	}
 }
 async function runCheck(args = []) {
@@ -3945,7 +4059,8 @@ async function runCheck(args = []) {
 			skipped.push({
 				name: skillName,
 				reason: getSkipReason(entry),
-				sourceUrl: entry.sourceUrl
+				sourceUrl: entry.sourceUrl,
+				ref: entry.ref
 			});
 			continue;
 		}
@@ -3966,7 +4081,7 @@ async function runCheck(args = []) {
 	const updates = [];
 	const errors = [];
 	for (const [source, skills] of skillsBySource) for (const { name, entry } of skills) try {
-		const latestHash = await fetchSkillFolderHash(source, entry.skillPath, token);
+		const latestHash = await fetchSkillFolderHash(source, entry.skillPath, token, entry.ref);
 		if (!latestHash) {
 			errors.push({
 				name,
@@ -4001,6 +4116,11 @@ async function runCheck(args = []) {
 	if (errors.length > 0) {
 		console.log();
 		console.log(`${DIM}Could not check ${errors.length} skill(s) (may need reinstall)${RESET}`);
+		console.log();
+		for (const error of errors) {
+			console.log(`  ${DIM}✗${RESET} ${error.name}`);
+			console.log(`    ${DIM}source: ${error.source}${RESET}`);
+		}
 	}
 	printSkippedSkills(skipped);
 	track({
@@ -4030,12 +4150,13 @@ async function runUpdate() {
 			skipped.push({
 				name: skillName,
 				reason: getSkipReason(entry),
-				sourceUrl: entry.sourceUrl
+				sourceUrl: entry.sourceUrl,
+				ref: entry.ref
 			});
 			continue;
 		}
 		try {
-			const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath, token);
+			const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath, token, entry.ref);
 			if (latestHash && latestHash !== entry.skillFolderHash) updates.push({
 				name: skillName,
 				source: entry.source,
@@ -4059,18 +4180,15 @@ async function runUpdate() {
 	let failCount = 0;
 	for (const update of updates) {
 		console.log(`${TEXT}Updating ${update.name}...${RESET}`);
-		let installUrl = update.entry.sourceUrl;
-		if (update.entry.skillPath) {
-			let skillFolder = update.entry.skillPath;
-			if (skillFolder.endsWith("/SKILL.md")) skillFolder = skillFolder.slice(0, -9);
-			else if (skillFolder.endsWith("SKILL.md")) skillFolder = skillFolder.slice(0, -8);
-			if (skillFolder.endsWith("/")) skillFolder = skillFolder.slice(0, -1);
-			installUrl = update.entry.sourceUrl.replace(/\.git$/, "").replace(/\/$/, "");
-			installUrl = `${installUrl}/tree/main/${skillFolder}`;
-		}
-		if (spawnSync("npx", [
-			"-y",
-			"skills",
+		const installUrl = buildUpdateInstallSource(update.entry);
+		const cliEntry = join(__dirname, "..", "bin", "cli.mjs");
+		if (!existsSync(cliEntry)) {
+			failCount++;
+			console.log(`  ${DIM}✗ Failed to update ${update.name}: CLI entrypoint not found at ${cliEntry}${RESET}`);
+			continue;
+		}
+		if (spawnSync(process.execPath, [
+			cliEntry,
 			"add",
 			installUrl,
 			"-g",
@@ -4081,6 +4199,7 @@ async function runUpdate() {
 				"pipe",
 				"pipe"
 			],
+			encoding: "utf-8",
 			shell: process.platform === "win32"
 		}).status === 0) {
 			successCount++;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skills",
-  "version": "1.4.5",
+  "version": "1.4.7",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
@@ -19,8 +19,8 @@
     "dev": "node src/cli.ts",
     "exec:test": "node scripts/execute-tests.ts",
     "prepublishOnly": "npm run build",
-    "format": "prettier --write 'src/**/*.ts' 'scripts/**/*.ts'",
-    "format:check": "prettier --check 'src/**/*.ts' 'scripts/**/*.ts'",
+    "format": "prettier --write \"src/**/*.ts\" \"scripts/**/*.ts\"",
+    "format:check": "prettier --check \"src/**/*.ts\" \"scripts/**/*.ts\"",
     "prepare": "husky",
     "test": "vitest",
     "type-check": "tsc --noEmit",
@@ -39,6 +39,7 @@
     "amp",
     "antigravity",
     "augment",
+    "bob",
     "claude-code",
     "openclaw",
     "cline",
@@ -49,7 +50,9 @@
     "cortex",
     "crush",
     "cursor",
+    "deepagents",
     "droid",
+    "firebender",
     "gemini-cli",
     "github-copilot",
     "goose",