skillsets 0.6.2 → 0.8.0

package/dist/commands/audit-report.d.ts

@@ -15,6 +15,8 @@ export interface AuditResults {
     readmeLinks: AuditResult;
     mcpServers: AuditResult;
     runtimeDeps: AuditResult;
+    installNotes: AuditResult;
+    ccExtensions: AuditResult;
     skillsetName?: string;
     skillsetVersion?: string;
     authorHandle?: string;

package/dist/commands/audit-report.js

@@ -15,7 +15,9 @@ export function isAuditPassing(results, enforceMcp) {
         results.readmeLinks.status === 'PASS' &&
         results.versionCheck.status === 'PASS' &&
         (enforceMcp ? results.mcpServers.status === 'PASS' : true) &&
-        (enforceMcp ? results.runtimeDeps.status === 'PASS' : true);
+        (enforceMcp ? results.runtimeDeps.status === 'PASS' : true) &&
+        results.installNotes.status === 'PASS' &&
+        (enforceMcp ? results.ccExtensions.status === 'PASS' : true);
 }
 function statusIcon(status) {
     if (status === 'PASS')
@@ -36,6 +38,7 @@ export function hasWarnings(results) {
         results.manifest, results.requiredFiles, results.contentStructure,
         results.fileSize, results.binary, results.secrets, results.readmeLinks,
         results.versionCheck, results.mcpServers, results.runtimeDeps,
+        results.installNotes, results.ccExtensions,
     ];
     return checks.some(c => c.status === 'WARNING');
 }
@@ -69,6 +72,8 @@ export function generateReport(results, enforceMcp = false) {
 | Version Check | ${statusIcon(results.versionCheck.status)} | ${results.versionCheck.details} |
 | MCP Servers | ${statusIcon(results.mcpServers.status)} | ${results.mcpServers.details} |
 | Runtime Dependencies | ${statusIcon(results.runtimeDeps.status)} | ${results.runtimeDeps.details} |
+| Install Notes | ${statusIcon(results.installNotes.status)} | ${results.installNotes.details} |
+| CC Extensions | ${statusIcon(results.ccExtensions.status)} | ${results.ccExtensions.details} |
 
 ---
 
@@ -121,6 +126,14 @@ ${results.mcpServers.findings || 'MCP server declarations are consistent between
 
 ${results.runtimeDeps.findings || 'Runtime dependency declarations are consistent between content and manifest.'}
 
+### 10. Install Notes
+
+${results.installNotes.findings || 'Install notes present and valid.'}
+
+### 11. CC Extensions
+
+${results.ccExtensions.findings || 'CC extension declarations are consistent with manifest.'}
+
 ---
 
 ## File Inventory
@@ -152,7 +165,7 @@ ${!allPassed
 2. Confirm or resolve each warning
 3. Run: \`npx skillsets submit\``
             : `1. Review this audit report
-2. Ensure PROOF.md has adequate production evidence
+2. Review production evidence and audit findings
 3. Run: \`npx skillsets submit\``}
 
 ---

package/dist/commands/audit.js

@@ -185,6 +185,49 @@ function qualitativeCheck(result, isCheck, errorLabel, contentLabel) {
         findings: `${contentLabel} detected in content. The \`/audit-skill\` will populate \`skillset.yaml\` and CI will re-validate.\n\n${findings}`,
     };
 }
+function validateCcExtensions(cwd) {
+    const manifestPath = join(cwd, 'skillset.yaml');
+    if (!existsSync(manifestPath))
+        return { valid: true, errors: [] };
+    try {
+        const content = readFileSync(manifestPath, 'utf-8');
+        const data = yaml.load(content);
+        if (!data.cc_extensions || !Array.isArray(data.cc_extensions)) {
+            return { valid: true, errors: [] };
+        }
+        const errors = [];
+        const names = new Set();
+        for (const ext of data.cc_extensions) {
+            if (!ext.name) {
+                errors.push('CC extension missing required field: name');
+                continue;
+            }
+            if (!ext.type || !['native', 'plugin'].includes(ext.type)) {
+                errors.push(`CC extension '${ext.name}': type must be 'native' or 'plugin'`);
+            }
+            if (!ext.cc_reputation || ext.cc_reputation.length < 20) {
+                errors.push(`CC extension '${ext.name}': cc_reputation required (min 20 chars)`);
+            }
+            if (!ext.researched_at) {
+                errors.push(`CC extension '${ext.name}': researched_at required (ISO date)`);
+            }
+            if (ext.type === 'plugin' && !ext.source) {
+                errors.push(`CC extension '${ext.name}': source required for plugin type`);
+            }
+            if (ext.source && !/^(registry:|npm:|github:).+/.test(ext.source)) {
+                errors.push(`CC extension '${ext.name}': source must start with registry:, npm:, or github:`);
+            }
+            if (names.has(ext.name)) {
+                errors.push(`CC extension '${ext.name}': duplicate name`);
+            }
+            names.add(ext.name);
+        }
+        return { valid: errors.length === 0, errors };
+    }
+    catch {
+        return { valid: true, errors: [] };
+    }
+}
 export async function audit(options = {}) {
     const spinner = ora('Auditing skillset...').start();
     const cwd = process.cwd();
@@ -199,6 +242,8 @@ export async function audit(options = {}) {
         readmeLinks: { status: 'PASS', details: '' },
         mcpServers: { status: 'PASS', details: '' },
         runtimeDeps: { status: 'PASS', details: '' },
+        installNotes: { status: 'PASS', details: '' },
+        ccExtensions: { status: 'PASS', details: '' },
         isUpdate: false,
         files: [],
         largeFiles: [],
@@ -227,6 +272,7 @@ export async function audit(options = {}) {
     const hasContent = existsSync(join(cwd, 'content'));
     const hasReadme = existsSync(join(cwd, 'content', 'README.md'));
     const hasQuickstart = existsSync(join(cwd, 'content', 'QUICKSTART.md'));
+    const hasInstallNotes = existsSync(join(cwd, 'content', 'INSTALL_NOTES.md'));
     const hasSkillsetYaml = existsSync(join(cwd, 'skillset.yaml'));
     const missingFiles = [];
     if (!hasSkillsetYaml)
@@ -237,6 +283,8 @@ export async function audit(options = {}) {
         missingFiles.push('content/README.md');
     if (!hasQuickstart)
         missingFiles.push('content/QUICKSTART.md');
+    if (!hasInstallNotes)
+        missingFiles.push('content/INSTALL_NOTES.md');
     if (missingFiles.length === 0) {
         results.requiredFiles = { status: 'PASS', details: 'All present' };
     }
@@ -247,6 +295,31 @@ export async function audit(options = {}) {
             findings: missingFiles.map(f => `- Missing: ${f}`).join('\n'),
         };
     }
+    // 2b. Install notes validation
+    spinner.text = 'Validating install notes...';
+    if (hasInstallNotes) {
+        const installNotesContent = readFileSync(join(cwd, 'content', 'INSTALL_NOTES.md'), 'utf-8');
+        if (installNotesContent.length > 4000) {
+            results.installNotes = {
+                status: 'FAIL',
+                details: `Exceeds 4000 character limit (${installNotesContent.length} chars)`,
+                findings: 'INSTALL_NOTES.md must be under 4000 characters for pre-install display.',
+            };
+        }
+        else if (options.check && installNotesContent.includes('<!-- Populated automatically by /audit-skill -->')) {
+            results.installNotes = {
+                status: 'FAIL',
+                details: 'Placeholder content detected',
+                findings: 'INSTALL_NOTES.md still contains placeholder content. The /audit-skill must populate the dependency section before submission.',
+            };
+        }
+        else {
+            results.installNotes = { status: 'PASS', details: 'Valid' };
+        }
+    }
+    else {
+        results.installNotes = { status: 'FAIL', details: 'Missing' };
+    }
     // 3. Content structure
     spinner.text = 'Verifying content structure...';
     const hasClaudeDir = existsSync(join(cwd, 'content', '.claude'));
@@ -369,6 +442,10 @@ export async function audit(options = {}) {
     spinner.text = 'Validating runtime dependencies...';
     const depsResult = validateRuntimeDeps(cwd);
     results.runtimeDeps = qualitativeCheck(depsResult, !!options.check, 'dependency', 'Runtime dependencies');
+    // 11. CC extensions validation
+    spinner.text = 'Validating CC extensions...';
+    const ccResult = validateCcExtensions(cwd);
+    results.ccExtensions = qualitativeCheck(ccResult, !!options.check, 'CC extension', 'CC extensions');
     // Generate report
     spinner.text = 'Generating audit report...';
     const report = generateReport(results, !!options.check);
@@ -389,6 +466,8 @@ export async function audit(options = {}) {
         [results.versionCheck, 'Version'],
         [results.mcpServers, 'MCP Servers'],
         [results.runtimeDeps, 'Runtime Deps'],
+        [results.installNotes, 'Install Notes'],
+        [results.ccExtensions, 'CC Extensions'],
     ];
     console.log('\n' + chalk.bold('Audit Summary:'));
     console.log('');

package/dist/commands/init.js

@@ -3,7 +3,6 @@ import ora from 'ora';
 import { input, confirm, checkbox } from '@inquirer/prompts';
 import { existsSync, mkdirSync, copyFileSync, readdirSync, writeFileSync } from 'fs';
 import { join } from 'path';
-import degit from 'degit';
 import { execSync } from 'child_process';
 import { CDN_BASE_URL } from '../lib/constants.js';
 /** Marker files that indicate a directory is a self-contained support stack */
@@ -42,7 +41,6 @@ author:
 verification:
   production_links:
     - url: "{{PRODUCTION_URL}}"
-  production_proof: "./PROOF.md"
   audit_report: "./AUDIT_REPORT.md"
 
 # Discovery
@@ -120,23 +118,17 @@ your-project/
 
 [Add links to documentation, examples, or support channels]
 `;
-const PROOF_TEMPLATE = `# Production Proof
+const INSTALL_NOTES_TEMPLATE = `# {{NAME}}
 
-## Overview
+<!--
+Install notes for pre-install display. Max 4000 characters total.
+What does this skillset do? What should users know before installing?
+The dependency section below is populated by /audit-skill during review.
+-->
 
-This skillset has been verified in production.
+## Dependencies
 
-## Production URL
-
-{{PRODUCTION_URL}}
-
-## Evidence
-
-[Add screenshots, testimonials, or other evidence of production usage]
-
-## Projects Built
-
-[List projects or products built using this skillset]
+<!-- Populated automatically by /audit-skill -->
 `;
 function copyDirRecursive(src, dest, exclusions) {
     if (!existsSync(dest)) {
@@ -364,7 +356,7 @@ export async function init(options) {
     }
     // Auto-detect existing files — core skillset files and primitives
     const coreFiles = [
-        'CLAUDE.md', 'README.md', 'QUICKSTART.md',
+        'CLAUDE.md', 'README.md', 'QUICKSTART.md', 'INSTALL_NOTES.md',
         '.claude/', '.mcp.json',
     ];
     const detectedCore = coreFiles.filter((f) => {
@@ -439,36 +431,28 @@ export async function init(options) {
                 .replace(/\{\{AUTHOR_HANDLE\}\}/g, authorHandle);
             writeFileSync(join(cwd, 'content', 'QUICKSTART.md'), quickstart);
         }
-        // Generate PROOF.md
-        const proof = PROOF_TEMPLATE.replace('{{PRODUCTION_URL}}', productionUrl);
-        writeFileSync(join(cwd, 'PROOF.md'), proof);
-        // Install audit-skill from registry
-        spinner.text = 'Fetching audit-skill...';
-        const skillDir = join(cwd, '.claude', 'skills', 'audit-skill');
-        const emitter = degit('skillsets-cc/main/tools/audit-skill', {
-            cache: false,
-            force: true,
-            verbose: false,
-        });
-        await emitter.clone(skillDir);
+        // Generate content/INSTALL_NOTES.md (if not copying existing)
+        if (!existsSync(join(cwd, 'content', 'INSTALL_NOTES.md'))) {
+            const installNotes = INSTALL_NOTES_TEMPLATE
+                .replace(/\{\{NAME\}\}/g, name);
+            writeFileSync(join(cwd, 'content', 'INSTALL_NOTES.md'), installNotes);
+        }
         spinner.succeed('Skillset structure created');
         // Summary
         console.log(chalk.green('\n✓ Initialized skillset submission:\n'));
         console.log('  skillset.yaml     - Manifest (edit as needed)');
-        console.log('  PROOF.md          - Production evidence (add details)');
         console.log('  content/          - Installable files');
         console.log('    ├── README.md       - Documentation');
         console.log('    ├── QUICKSTART.md   - Post-install guide');
+        console.log('    ├── INSTALL_NOTES.md - Pre-install notes');
         if (filesToCopy.length > 0) {
             filesToCopy.forEach((f) => console.log(`    └── ${f}`));
         }
         else {
             console.log('    └── (add your .claude/ and/or CLAUDE.md here)');
         }
-        console.log('  .claude/skills/   - Audit skill installed');
-        console.log('    └── audit-skill/');
         console.log(chalk.cyan('\nNext steps:'));
-        console.log('  1. Edit PROOF.md with production evidence');
+        console.log('  1. Edit content/INSTALL_NOTES.md with install notes');
         console.log('  2. Ensure content/ has your skillset files');
         console.log('  3. Run: npx skillsets audit');
         console.log('  4. Run: /audit-skill [AUDIT_REPORT.md] [path/to/reference-repo]');

package/dist/commands/submit.js

@@ -95,7 +95,7 @@ export async function submit() {
     }
     console.log(chalk.green('✓ Audit report passing'));
     // 6. Check required files
-    const requiredFiles = ['skillset.yaml', 'PROOF.md', 'AUDIT_REPORT.md', 'content'];
+    const requiredFiles = ['skillset.yaml', 'AUDIT_REPORT.md', 'content'];
     for (const file of requiredFiles) {
         if (!existsSync(join(cwd, file))) {
             throw new Error(`Missing required: ${file}`);
@@ -159,7 +159,7 @@ export async function submit() {
         mkdirSync(skillsetDir, { recursive: true });
         // Copy files
         spinner.text = 'Copying skillset files...';
-        const filesToCopy = ['skillset.yaml', 'PROOF.md', 'AUDIT_REPORT.md', 'content'];
+        const filesToCopy = ['skillset.yaml', 'AUDIT_REPORT.md', 'content'];
         for (const file of filesToCopy) {
             const src = join(cwd, file);
             const dest = join(skillsetDir, file);
@@ -235,7 +235,7 @@ Submitted via \`npx skillsets submit\`
 
 - [x] \`skillset.yaml\` validated against schema
 - [x] \`README.md\` with installation and usage instructions
-- [x] \`PROOF.md\` with production evidence
+- [x] \`content/INSTALL_NOTES.md\` with install notes
 - [x] \`AUDIT_REPORT.md\` generated and passing
 - [x] \`content/\` directory with skillset files
 

package/dist/lib/templates.d.ts

@@ -1,4 +1,4 @@
-export declare const SKILLSET_YAML_TEMPLATE = "schema_version: \"1.0\"\nbatch_id: \"{{BATCH_ID}}\"\n\n# Identity\nname: \"{{NAME}}\"\nversion: \"1.0.0\"\ndescription: \"{{DESCRIPTION}}\"\n\nauthor:\n  handle: \"{{AUTHOR_HANDLE}}\"\n  url: \"{{AUTHOR_URL}}\"\n\n# Verification\nverification:\n  production_links:\n    - url: \"{{PRODUCTION_URL}}\"\n  production_proof: \"./PROOF.md\"\n  audit_report: \"./AUDIT_REPORT.md\"\n\n# Discovery\ntags:\n{{TAGS}}\n\ncompatibility:\n  claude_code_version: \">=1.0.0\"\n  languages:\n    - \"any\"\n\n# Lifecycle\nstatus: \"active\"\n\n# Content\nentry_point: \"./content/CLAUDE.md\"\n";
+export declare const SKILLSET_YAML_TEMPLATE = "schema_version: \"1.0\"\nbatch_id: \"{{BATCH_ID}}\"\n\n# Identity\nname: \"{{NAME}}\"\nversion: \"1.0.0\"\ndescription: \"{{DESCRIPTION}}\"\n\nauthor:\n  handle: \"{{AUTHOR_HANDLE}}\"\n  url: \"{{AUTHOR_URL}}\"\n\n# Verification\nverification:\n  production_links:\n    - url: \"{{PRODUCTION_URL}}\"\n  audit_report: \"./AUDIT_REPORT.md\"\n\n# Discovery\ntags:\n{{TAGS}}\n\ncompatibility:\n  claude_code_version: \">=1.0.0\"\n  languages:\n    - \"any\"\n\n# Lifecycle\nstatus: \"active\"\n\n# Content\nentry_point: \"./content/CLAUDE.md\"\n";
 export declare const README_TEMPLATE = "# {{NAME}}\n\n{{DESCRIPTION}}\n\n## Installation\n\n```bash\nnpx skillsets install {{AUTHOR_HANDLE}}/{{NAME}}\n```\n\n## Usage\n\n[Describe how to use your skillset]\n\n## What's Included\n\n[List the key files and their purposes]\n\n## License\n\n[Your license]\n";
 export declare const QUICKSTART_TEMPLATE = "# Quickstart\n\nAfter installing via `npx skillsets install {{AUTHOR_HANDLE}}/{{NAME}}`, customize the workflow for your project.\n\n---\n\n## What Was Installed\n\n```\nyour-project/\n\u251C\u2500\u2500 .claude/          # Skills, agents, resources\n\u251C\u2500\u2500 CLAUDE.md         # Project config \u2190 START HERE\n\u2514\u2500\u2500 README.md         # Documentation\n```\n\n---\n\n## Getting Started\n\n1. **Edit CLAUDE.md** \u2014 Replace placeholder content with your project's specifics\n2. **Customize .claude/** \u2014 Adapt skills, agents, and resources for your stack\n3. **Run** \u2014 `claude` to start using the skillset\n\n---\n\n## Customization Checklist\n\n- [ ] Update Identity & Constraints in CLAUDE.md\n- [ ] Configure style guides in .claude/resources/\n- [ ] Adapt agent definitions in .claude/agents/\n- [ ] Set up any required infrastructure (Docker, API keys, etc.)\n\n---\n\n## Resources\n\n[Add links to documentation, examples, or support channels]\n";
-export declare const PROOF_TEMPLATE = "# Production Proof\n\n## Overview\n\nThis skillset has been verified in production.\n\n## Production URL\n\n{{PRODUCTION_URL}}\n\n## Evidence\n\n[Add screenshots, testimonials, or other evidence of production usage]\n\n## Projects Built\n\n[List projects or products built using this skillset]\n";
+export declare const INSTALL_NOTES_TEMPLATE = "# {{NAME}}\n\n<!--\nInstall notes for pre-install display. Max 4000 characters total.\nWhat does this skillset do? What should users know before installing?\nThe dependency section below is populated by /audit-skill during review.\n-->\n\n## Dependencies\n\n<!-- Populated automatically by /audit-skill -->\n";

package/dist/lib/templates.js

@@ -14,7 +14,6 @@ author:
 verification:
   production_links:
     - url: "{{PRODUCTION_URL}}"
-  production_proof: "./PROOF.md"
   audit_report: "./AUDIT_REPORT.md"
 
 # Discovery
@@ -92,21 +91,15 @@ your-project/
 
 [Add links to documentation, examples, or support channels]
 `;
-export const PROOF_TEMPLATE = `# Production Proof
+export const INSTALL_NOTES_TEMPLATE = `# {{NAME}}
 
-## Overview
+<!--
+Install notes for pre-install display. Max 4000 characters total.
+What does this skillset do? What should users know before installing?
+The dependency section below is populated by /audit-skill during review.
+-->
 
-This skillset has been verified in production.
+## Dependencies
 
-## Production URL
-
-{{PRODUCTION_URL}}
-
-## Evidence
-
-[Add screenshots, testimonials, or other evidence of production usage]
-
-## Projects Built
-
-[List projects or products built using this skillset]
+<!-- Populated automatically by /audit-skill -->
 `;

package/dist/types/index.d.ts

@@ -4,7 +4,6 @@ export interface SkillsetVerification {
         url: string;
         label?: string;
     }>;
-    production_proof?: string;
     audit_report: string;
 }
 export interface SkillsetCompatibility {
@@ -30,6 +29,13 @@ export interface McpServer {
     mcp_reputation: string;
     researched_at: string;
 }
+export interface CcExtension {
+    name: string;
+    type: 'native' | 'plugin';
+    source?: string;
+    cc_reputation: string;
+    researched_at: string;
+}
 export interface RuntimeDependency {
     path: string;
     manager: string;
@@ -63,6 +69,7 @@ export interface SearchIndexEntry {
     files: Record<string, string>;
     mcp_servers?: McpServer[];
     runtime_dependencies?: RuntimeDependency[];
+    cc_extensions?: CcExtension[];
 }
 export interface StatsResponse {
     stars: Record<string, number>;
@@ -75,7 +82,7 @@ export interface Skillset {
     description: string;
     author: {
         handle: string;
-        url: string;
+        url?: string;
     };
     verification: SkillsetVerification;
     tags: string[];
@@ -84,4 +91,5 @@ export interface Skillset {
     entry_point: string;
     mcp_servers?: McpServer[];
     runtime_dependencies?: RuntimeDependency[];
+    cc_extensions?: CcExtension[];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillsets",
-  "version": "0.6.2",
+  "version": "0.8.0",
   "description": "CLI tool for discovering and installing verified skillsets",
   "type": "module",
   "bin": {