skillshield 1.0.0

package/dist/cli/commands/init.js

@@ -0,0 +1,99 @@
+import chalk from 'chalk';
+import * as fs from 'fs/promises';
+import inquirer from 'inquirer';
+import ora from 'ora';
+import { homedir } from 'os';
+import { resolve } from 'path';
+import { t } from '../../i18n/index.js';
+export function init(program) {
+    program
+        .command('init')
+        .description(chalk.cyan('Initialize SkillKit in your project'))
+        .option('--yes', 'Use default values without prompting')
+        .action(async (options) => {
+        try {
+            console.log(chalk.cyan.bold('\n✨ SkillKit Setup Wizard\n'));
+            const config = {
+                language: 'en',
+                provider: 'anthropic',
+                model: 'claude-3-5-sonnet',
+                apiKey: '',
+                registryUrl: 'https://clawhub.ai',
+            };
+            if (options.yes) {
+                // Use defaults
+                config.apiKey = process.env.SKILLKIT_API_KEY || '';
+            }
+            else {
+                // Interactive prompts
+                const answers = await inquirer.prompt([
+                    {
+                        type: 'list',
+                        name: 'language',
+                        message: t('init.language'),
+                        choices: [
+                            { name: 'English', value: 'en' },
+                            { name: 'Español', value: 'es' },
+                            { name: '中文', value: 'zh' },
+                            { name: 'Português', value: 'pt' },
+                        ],
+                        default: 'en',
+                    },
+                    {
+                        type: 'list',
+                        name: 'provider',
+                        message: t('init.provider'),
+                        choices: [
+                            { name: 'Anthropic (Claude)', value: 'anthropic' },
+                            { name: 'OpenAI (GPT)', value: 'openai' },
+                            { name: 'Groq', value: 'groq' },
+                        ],
+                        default: 'anthropic',
+                    },
+                    {
+                        type: 'input',
+                        name: 'apiKey',
+                        message: t('init.apiKey'),
+                        mask: '*',
+                        validate: (input) => input.length > 0 || t('init.apiKeyRequired'),
+                    },
+                ]);
+                Object.assign(config, answers);
+            }
+            // Create ~/.skillkit/
+            const spinner = ora(t('init.creating')).start();
+            const globalConfigDir = resolve(homedir(), '.skillkit');
+            const projectConfigDir = resolve(process.cwd(), '.skillkit');
+            await fs.mkdir(globalConfigDir, { recursive: true });
+            await fs.mkdir(projectConfigDir, { recursive: true });
+            // Write global config
+            const globalConfigPath = resolve(globalConfigDir, 'config.json');
+            await fs.writeFile(globalConfigPath, JSON.stringify(config, null, 2));
+            // Write project config
+            const projectConfig = {
+                language: config.language,
+                provider: config.provider,
+                model: config.model,
+            };
+            const projectConfigPath = resolve(projectConfigDir, 'config.json');
+            await fs.writeFile(projectConfigPath, JSON.stringify(projectConfig, null, 2));
+            // Create skills directory
+            await fs.mkdir(resolve(projectConfigDir, 'skills'), { recursive: true });
+            // Create .gitignore
+            const gitignorePath = resolve(projectConfigDir, '.gitignore');
+            await fs.writeFile(gitignorePath, 'config.json\n.env\n');
+            spinner.succeed(chalk.green(t('init.success')));
+            console.log(chalk.bold.cyan('\n📋 Next Steps:\n'));
+            console.log(chalk.gray(`  1. ${t('init.nextSteps1')}`));
+            console.log(chalk.gray(`  2. ${t('init.nextSteps2')}`));
+            console.log(chalk.gray(`  3. ${t('init.nextSteps3')}`));
+            console.log(chalk.gray(`  4. ${t('init.nextSteps4')}`));
+            console.log(chalk.gray('\n  For help: skillkit --help\n'));
+        }
+        catch (error) {
+            console.error(chalk.red(t('error.initFailed')), error);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AAUxC,MAAM,UAAU,IAAI,CAAC,OAAgB;IACnC,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;SAC9D,MAAM,CAAC,OAAO,EAAE,sCAAsC,CAAC;SACvD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;YAE5D,MAAM,MAAM,GAAe;gBACzB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,WAAW;gBACrB,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,oBAAoB;aAClC,CAAC;YAEF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,eAAe;gBACf,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,sBAAsB;gBACtB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;oBACpC;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC;wBAC3B,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;4BAChC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;4BAChC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;4BAC3B,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE;yBACnC;wBACD,OAAO,EAAE,IAAI;qBACd;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC;wBAC3B,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,WAAW,EAAE;4BAClD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE;4BACzC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;yBAChC;wBACD,OAAO,EAAE,WAAW;qBACrB;oBACD;wBACE,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC;wBACzB,IAAI,EAAE,GAAG;wBACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC;qBAClE;iBACF,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;YAED,sBAAsB;YACtB,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAChD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;YACxD,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YAE7D,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEtD,sBAAsB;YACtB,MAAM,gBAAgB,GAAG,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;YACjE,MAAM,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAEtE,uBAAuB;YACvB,MAAM,aAAa,GAAG;gBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;YACF,MAAM,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YACnE,MAAM,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAE9E,0BAA0B;YAC1B,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEzE,oBAAoB;YACpB,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;YAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;YAEzD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAEhD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/install.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function install(program: Command): void;
+//# sourceMappingURL=install.d.ts.map

package/dist/cli/commands/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/install.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,QA+FvC"}

package/dist/cli/commands/install.js

@@ -0,0 +1,90 @@
+import chalk from 'chalk';
+import ora from 'ora';
+import { t } from '../../i18n/index.js';
+import { fetchSkill } from '../../hub/index.js';
+import { installSkill as registryInstall } from '../../hub/registry.js';
+import { scanSkill } from '../../runtime/executor.js';
+export function install(program) {
+    program
+        .command('install <skillRef>')
+        .description(chalk.cyan('Install a skill from ClawHub or URL'))
+        .option('--force', 'Skip security confirmation')
+        .option('--json', 'Output as JSON')
+        .action(async (skillRef, options) => {
+        try {
+            const spinner = ora(t('install.fetching')).start();
+            // Fetch skill
+            let skillContent;
+            let skillName;
+            if (skillRef.startsWith('http')) {
+                // From URL
+                const response = await fetch(skillRef);
+                if (!response.ok)
+                    throw new Error(`HTTP ${response.status}`);
+                skillContent = await response.text();
+                skillName = new URL(skillRef).pathname.split('/').pop() || 'skill';
+            }
+            else {
+                // From ClawHub
+                const result = await fetchSkill(skillRef);
+                skillContent = result.content;
+                skillName = result.name;
+            }
+            spinner.succeed(chalk.green(t('install.fetched')));
+            // Security scan
+            let safeToInstall = true;
+            if (!options.force) {
+                const scanSpinner = ora(t('install.scanning')).start();
+                try {
+                    const scanResult = await scanSkill(skillContent);
+                    scanSpinner.succeed();
+                    if (scanResult.score < 80) {
+                        console.log(chalk.yellow(`\n⚠️  Security Issues Found (Score: ${Math.round(scanResult.score)}%)\n`));
+                        scanResult.threats.slice(0, 5).forEach((threat) => {
+                            const severityColor = threat.severity === 'critical'
+                                ? chalk.red
+                                : threat.severity === 'high'
+                                    ? chalk.yellow
+                                    : chalk.blue;
+                            console.log(`  ${severityColor(`[${threat.severity.toUpperCase()}]`)} ${threat.description}`);
+                        });
+                        if (scanResult.threats.length > 5) {
+                            console.log(chalk.gray(`  ... and ${scanResult.threats.length - 5} more\n`));
+                        }
+                        // Prompt user
+                        safeToInstall = await new Promise((resolve) => {
+                            process.stdout.write(chalk.yellow('\nInstall anyway? (yes/no): '));
+                            process.stdin.once('data', (data) => {
+                                resolve(data.toString().trim().toLowerCase() === 'yes');
+                            });
+                        });
+                    }
+                }
+                catch (error) {
+                    scanSpinner.warn(chalk.yellow(t('install.scanWarning')));
+                }
+            }
+            if (!safeToInstall) {
+                console.log(chalk.gray(t('install.cancelled')));
+                process.exit(0);
+            }
+            // Install to local registry
+            const installSpinner = ora(t('install.installing')).start();
+            const installed = await registryInstall(skillName, skillContent, {
+                source: skillRef.startsWith('http') ? skillRef : 'clawhub',
+            });
+            installSpinner.succeed(chalk.green(`✓ ${t('install.installed')}: ${chalk.cyan(installed.name)}`));
+            console.log(chalk.dim(`\n📍 Location: ${installed.path}`));
+            console.log(chalk.dim(`📅 Installed: ${new Date(installed.installedAt).toLocaleString()}\n`));
+            console.log(chalk.dim(`💡 Run with: skillkit run ${skillName}\n`));
+            if (options.json) {
+                console.log(JSON.stringify(installed, null, 2));
+            }
+        }
+        catch (error) {
+            console.error(chalk.red(t('error.installFailed')), error);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=install.js.map

package/dist/cli/commands/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/cli/commands/install.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,IAAI,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAOtD,MAAM,UAAU,OAAO,CAAC,OAAgB;IACtC,OAAO;SACJ,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;SAC9D,MAAM,CAAC,SAAS,EAAE,4BAA4B,CAAC;SAC/C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAuB,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAEnD,cAAc;YACd,IAAI,YAAoB,CAAC;YACzB,IAAI,SAAiB,CAAC;YAEtB,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,WAAW;gBACX,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7D,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACrC,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,eAAe;gBACf,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1C,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC;gBAC9B,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;YAC1B,CAAC;YAED,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAEnD,gBAAgB;YAChB,IAAI,aAAa,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;gBACvD,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;oBACjD,WAAW,CAAC,OAAO,EAAE,CAAC;oBAEtB,IAAI,UAAU,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,uCAAuC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;wBACrG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;4BAChD,MAAM,aAAa,GACjB,MAAM,CAAC,QAAQ,KAAK,UAAU;gCAC5B,CAAC,CAAC,KAAK,CAAC,GAAG;gCACX,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;oCAC1B,CAAC,CAAC,KAAK,CAAC,MAAM;oCACd,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;4BACnB,OAAO,CAAC,GAAG,CACT,KAAK,aAAa,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CACjF,CAAC;wBACJ,CAAC,CAAC,CAAC;wBAEH,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;wBAC/E,CAAC;wBAED,cAAc;wBACd,aAAa,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;4BACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC;4BACnE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gCAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;4BAC1D,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;YAED,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,4BAA4B;YAC5B,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAC5D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE;gBAC/D,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aAC3D,CAAC,CAAC;YAEH,cAAc,CAAC,OAAO,CACpB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAC1E,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6BAA6B,SAAS,IAAI,CAAC,CAAC,CAAC;YAEnE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/list.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function list(program: Command): void;
+//# sourceMappingURL=list.d.ts.map

package/dist/cli/commands/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/list.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,wBAAgB,IAAI,CAAC,OAAO,EAAE,OAAO,QAyFpC"}

package/dist/cli/commands/list.js

@@ -0,0 +1,76 @@
+import chalk from 'chalk';
+import ora from 'ora';
+import { t } from '../../i18n/index.js';
+import { listInstalled } from '../../hub/registry.js';
+export function list(program) {
+    program
+        .command('list')
+        .description(chalk.cyan('List installed skills'))
+        .option('--json', 'Output as JSON')
+        .option('-V, --verbose', 'Show detailed information')
+        .action(async (options) => {
+        try {
+            const spinner = ora(t('list.loading')).start();
+            const skills = await listInstalled();
+            spinner.stop();
+            if (skills.length === 0) {
+                console.log(chalk.yellow(`\n${t('list.noSkills')}\n`));
+                console.log(chalk.dim('Install your first skill with: skillkit install <skill-name>\n'));
+                return;
+            }
+            console.log(chalk.cyan.bold(`\n📚 Installed Skills (${skills.length})\n`));
+            if (options.verbose) {
+                // Detailed view
+                skills.forEach((skill) => {
+                    console.log(chalk.bold(skill.name));
+                    console.log(chalk.gray(`  Path: ${skill.path}`));
+                    console.log(chalk.gray(`  Installed: ${new Date(skill.installedAt).toLocaleDateString()}`));
+                    console.log(chalk.gray(`  Source: ${skill.source}`));
+                    if (skill.securityScore !== undefined) {
+                        const scoreColor = skill.securityScore >= 80
+                            ? chalk.green
+                            : skill.securityScore >= 50
+                                ? chalk.yellow
+                                : chalk.red;
+                        console.log(chalk.gray(`  Security: ${scoreColor(Math.round(skill.securityScore) + '%')}`));
+                    }
+                    if (skill.usageCount) {
+                        console.log(chalk.gray(`  Uses: ${skill.usageCount}`));
+                    }
+                    console.log();
+                });
+            }
+            else {
+                // Table view
+                console.log(chalk.gray('┌────────────────────────┬──────────┬──────────────────────┐\n' +
+                    '│ Name                   │ Security │ Last Used            │\n' +
+                    '├────────────────────────┼──────────┼──────────────────────┤'));
+                skills.forEach((skill) => {
+                    const scoreColor = skill.securityScore !== undefined && skill.securityScore >= 80
+                        ? chalk.green
+                        : skill.securityScore !== undefined && skill.securityScore >= 50
+                            ? chalk.yellow
+                            : chalk.red;
+                    const scoreBadge = skill.securityScore !== undefined
+                        ? scoreColor(Math.round(skill.securityScore) + '%')
+                        : chalk.gray('-');
+                    const lastUsed = skill.lastUsedAt
+                        ? new Date(skill.lastUsedAt).toLocaleDateString()
+                        : '-';
+                    const name = (skill.name || 'unknown').slice(0, 22).padEnd(22);
+                    const score = String(scoreBadge).padEnd(8);
+                    console.log(`│ ${name} │ ${score} │ ${lastUsed.padEnd(20)} │`);
+                });
+                console.log(chalk.gray('└────────────────────────┴──────────┴──────────────────────┘\n'));
+            }
+            if (options.json) {
+                console.log(JSON.stringify(skills, null, 2));
+            }
+        }
+        catch (error) {
+            console.error(chalk.red(t('error.listFailed')), error);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=list.js.map

package/dist/cli/commands/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/cli/commands/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAkB,MAAM,uBAAuB,CAAC;AAOtE,MAAM,UAAU,IAAI,CAAC,OAAgB;IACnC,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;SAChD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC;SACpD,MAAM,CAAC,KAAK,EAAE,OAAoB,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;YAE3E,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,gBAAgB;gBAChB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAqB,EAAE,EAAE;oBACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACjD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAC/E,CAAC;oBACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBACrD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;wBACtC,MAAM,UAAU,GACd,KAAK,CAAC,aAAa,IAAI,EAAE;4BACvB,CAAC,CAAC,KAAK,CAAC,KAAK;4BACb,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE;gCACzB,CAAC,CAAC,KAAK,CAAC,MAAM;gCACd,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;wBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9F,CAAC;oBACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;wBACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;oBACzD,CAAC;oBACD,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,aAAa;gBACb,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,gEAAgE;oBAC9D,gEAAgE;oBAChE,8DAA8D,CACjE,CACF,CAAC;gBAEF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAqB,EAAE,EAAE;oBACvC,MAAM,UAAU,GACd,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE;wBAC5D,CAAC,CAAC,KAAK,CAAC,KAAK;wBACb,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE;4BAC9D,CAAC,CAAC,KAAK,CAAC,MAAM;4BACd,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;oBAElB,MAAM,UAAU,GACd,KAAK,CAAC,aAAa,KAAK,SAAS;wBAC/B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;wBACnD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU;wBAC/B,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE;wBACjD,CAAC,CAAC,GAAG,CAAC;oBAER,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAE3C,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,KAAK,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjE,CAAC,CAAC,CAAC;gBAEH,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAC7E,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/run.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function run(program: Command): void;
+//# sourceMappingURL=run.d.ts.map

package/dist/cli/commands/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/run.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,wBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,QAmKnC"}

package/dist/cli/commands/run.js

@@ -0,0 +1,160 @@
+import chalk from 'chalk';
+import ora from 'ora';
+import { t } from '../../i18n/index.js';
+import { scanSkill } from '../../runtime/executor.js';
+import { loadSkill, executeSkill } from '../../runtime/executor.js';
+export function run(program) {
+    program
+        .command('run <skill>')
+        .description(chalk.cyan('Execute a skill with any AI model'))
+        .option('--model <model>', 'Model to use (e.g., deepseek-chat, ollama/qwen2.5, gpt-4o)')
+        .option('--provider <provider>', 'Force provider (openai, anthropic, deepseek, qwen, ollama, groq)')
+        .option('--input <prompt>', 'Input prompt for the skill')
+        .option('--no-scan', 'Skip security scan')
+        .option('--stream', 'Stream output token by token')
+        .option('--channel <type>', 'Run via messaging channel (whatsapp, telegram, discord, slack)')
+        .option('--json', 'Output as JSON')
+        .option('-V, --verbose', 'Verbose output')
+        .action(async (skill, cmdOptions, cmd) => {
+        try {
+            // Merge subcommand options with parent (global) options
+            const parentOpts = cmd.parent?.opts?.() || {};
+            const options = { ...parentOpts, ...cmdOptions };
+            // Step 1: Security scan (unless --no-scan)
+            if (options.noScan !== false) {
+                const scanSpinner = ora(t('run.scanning') || 'Scanning for threats...').start();
+                try {
+                    // Load skill first to scan its content
+                    const content = await loadSkill(skill);
+                    const scanResult = await scanSkill(content);
+                    if (scanResult.status === 'BLOCKED') {
+                        scanSpinner.fail(chalk.red('BLOCKED — Malicious skill detected'));
+                        console.log(chalk.red(`\n  SkillGuard Score: ${scanResult.score}/100`));
+                        if (scanResult.hash) {
+                            console.log(chalk.red(`  Hash: ${scanResult.hash.slice(0, 16)}...`));
+                        }
+                        for (const threat of scanResult.threats) {
+                            console.log(chalk.red(`  [${threat.severity.toUpperCase()}] ${threat.description}`));
+                        }
+                        console.log(chalk.yellow('\nThis skill has been blocked for safety. Use --no-scan to override (NOT recommended).'));
+                        console.log(chalk.gray('This hash has been added to your local blocklist to protect you in the future.'));
+                        process.exit(1);
+                    }
+                    if (scanResult.status === 'REVIEW_REQUIRED') {
+                        scanSpinner.warn(chalk.yellow(`Security: ${scanResult.score}/100 — review recommended`));
+                        for (const threat of scanResult.threats) {
+                            const color = threat.severity === 'CRITICAL' ? chalk.red
+                                : threat.severity === 'HIGH' ? chalk.yellow
+                                    : chalk.blue;
+                            console.log(`  ${color(`[${threat.severity}]`)} ${threat.description}`);
+                        }
+                        if (scanResult.sandboxRecommended) {
+                            console.log(chalk.cyan('\n  TIP: This skill has suspicious patterns. Consider running with --sandbox:'));
+                            console.log(chalk.cyan('  skillkit run ' + skill + ' --sandbox'));
+                        }
+                        if (!options.json) {
+                            const answer = await new Promise((resolve) => {
+                                process.stdout.write(chalk.yellow('\nContinue anyway? (yes/no): '));
+                                process.stdin.once('data', (data) => {
+                                    resolve(data.toString().trim().toLowerCase() === 'yes');
+                                });
+                            });
+                            if (!answer) {
+                                console.log(chalk.gray('Cancelled'));
+                                process.exit(0);
+                            }
+                        }
+                    }
+                    else {
+                        scanSpinner.succeed(chalk.green(`Security: ${scanResult.score}/100 — safe`));
+                    }
+                }
+                catch (error) {
+                    scanSpinner.warn(chalk.yellow('Security scan skipped (could not read skill)'));
+                }
+            }
+            // Step 2: Load skill
+            const loadSpinner = ora(t('run.loading') || 'Loading skill...').start();
+            const skillContent = await loadSkill(skill);
+            loadSpinner.succeed(chalk.green('Skill loaded'));
+            // Step 3: Show execution context
+            const modelDisplay = options.model || 'auto-detect';
+            const providerDisplay = options.provider || 'auto-detect';
+            console.log(chalk.dim(`\n  Model: ${modelDisplay}`));
+            console.log(chalk.dim(`  Provider: ${providerDisplay}`));
+            if (options.input) {
+                console.log(chalk.dim(`  Input: "${options.input.slice(0, 80)}${options.input.length > 80 ? '...' : ''}"`));
+            }
+            // Step 4: Execute with REAL AI
+            const execSpinner = options.stream ? null : ora(t('run.executing') || 'Executing skill...').start();
+            if (options.stream) {
+                console.log(chalk.cyan.bold('\n📤 Output:\n'));
+            }
+            const startTime = Date.now();
+            try {
+                const result = await executeSkill({
+                    content: skillContent,
+                    input: options.input || '',
+                    model: options.model,
+                    provider: options.provider,
+                    channel: options.channel,
+                    verbose: options.verbose,
+                    stream: options.stream,
+                });
+                if (execSpinner) {
+                    execSpinner.succeed(chalk.green(t('run.complete') || 'Execution complete'));
+                }
+                // Show output (non-streaming mode)
+                if (!options.stream) {
+                    console.log(chalk.cyan.bold('\n📤 Output:\n'));
+                    console.log(result.output);
+                }
+                else {
+                    console.log(''); // newline after streamed output
+                }
+                // Show stats
+                const elapsed = (Date.now() - startTime) / 1000;
+                console.log(chalk.dim(`\n⏱️  Time: ${elapsed.toFixed(2)}s`));
+                console.log(chalk.dim(`🤖 Model: ${result.provider}/${result.model}`));
+                if (result.tokenUsage) {
+                    console.log(chalk.dim(`📊 Tokens: ${result.tokenUsage.input} in / ${result.tokenUsage.output} out`));
+                }
+                // JSON output
+                if (options.json) {
+                    console.log(JSON.stringify({
+                        success: true,
+                        output: result.output,
+                        model: result.model,
+                        provider: result.provider,
+                        tokenUsage: result.tokenUsage,
+                        duration: result.duration,
+                    }, null, 2));
+                }
+            }
+            catch (error) {
+                if (execSpinner)
+                    execSpinner.fail(chalk.red(t('run.failed') || 'Execution failed'));
+                const msg = error instanceof Error ? error.message : String(error);
+                // Helpful error messages
+                if (msg.includes('API key')) {
+                    console.error(chalk.red(`\n✗ ${msg}`));
+                    console.log(chalk.yellow('\nTip: Set your API key with:'));
+                    console.log(chalk.cyan('  export DEEPSEEK_API_KEY=your-key     # Free: deepseek.com'));
+                    console.log(chalk.cyan('  export GROQ_API_KEY=your-key         # Free: groq.com'));
+                    console.log(chalk.cyan('  export ANTHROPIC_API_KEY=your-key    # Paid: anthropic.com'));
+                    console.log(chalk.yellow('\nOr use a free local model:'));
+                    console.log(chalk.cyan('  skillkit run my-skill.md --model ollama/qwen2.5'));
+                }
+                else {
+                    console.error(chalk.red(`\n✗ ${msg}`));
+                }
+                process.exit(1);
+            }
+        }
+        catch (error) {
+            console.error(chalk.red(`Error: ${error instanceof Error ? error.message : String(error)}`));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=run.js.map

package/dist/cli/commands/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/cli/commands/run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAapE,MAAM,UAAU,GAAG,CAAC,OAAgB;IAClC,OAAO;SACJ,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;SAC5D,MAAM,CAAC,iBAAiB,EAAE,4DAA4D,CAAC;SACvF,MAAM,CAAC,uBAAuB,EAAE,kEAAkE,CAAC;SACnG,MAAM,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;SACxD,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC;SACzC,MAAM,CAAC,UAAU,EAAE,8BAA8B,CAAC;SAClD,MAAM,CAAC,kBAAkB,EAAE,gEAAgE,CAAC;SAC5F,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,UAAsB,EAAE,GAAQ,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,wDAAwD;YACxD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAe,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC;YAC7D,2CAA2C;YAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;gBAChF,IAAI,CAAC;oBACH,uCAAuC;oBACvC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;oBACvC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;oBAE5C,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBACpC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;wBAClE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,UAAU,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;wBACxE,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;4BACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;wBACvE,CAAC;wBACD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;4BACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;wBACvF,CAAC;wBACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wFAAwF,CAAC,CAAC,CAAC;wBACpH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC,CAAC;wBAC1G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBAED,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;wBAC5C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,UAAU,CAAC,KAAK,2BAA2B,CAAC,CAAC,CAAC;wBACzF,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;4BACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG;gCACtD,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;oCAC3C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;4BACf,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;wBAC1E,CAAC;wBAED,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;4BAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC,CAAC;4BACzG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC;wBACpE,CAAC;wBAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;4BAClB,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;gCACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;gCACpE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oCAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;gCAC1D,CAAC,CAAC,CAAC;4BACL,CAAC,CAAC,CAAC;4BACH,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gCACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;4BAClB,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,UAAU,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC;oBAC/E,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,8CAA8C,CAAC,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;YAED,qBAAqB;YACrB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;YACxE,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;YAC5C,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YAEjD,iCAAiC;YACjC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;YACpD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,YAAY,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,eAAe,EAAE,CAAC,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9G,CAAC;YAED,+BAA+B;YAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;YAEpG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;oBAChC,OAAO,EAAE,YAAY;oBACrB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;oBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBAEH,IAAI,WAAW,EAAE,CAAC;oBAChB,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBAED,mCAAmC;gBACnC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC;gBACnD,CAAC;gBAED,aAAa;gBACb,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAEvE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,MAAM,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC;gBACvG,CAAC;gBAED,cAAc;gBACd,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;wBACzB,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;qBAC1B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,WAAW;oBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC;gBAEpF,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEnE,yBAAyB;gBACzB,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;oBACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;oBAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC,CAAC;oBACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC,CAAC;oBACnF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC,CAAC;oBACxF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBAC/E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/scan.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function scan(program: Command): void;
+//# sourceMappingURL=scan.d.ts.map

package/dist/cli/commands/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/scan.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,wBAAgB,IAAI,CAAC,OAAO,EAAE,OAAO,QAgCpC"}

package/dist/cli/commands/scan.js

@@ -0,0 +1,133 @@
+import chalk from 'chalk';
+import * as fs from 'fs/promises';
+import ora from 'ora';
+import { resolve } from 'path';
+import { t } from '../../i18n/index.js';
+import { scanSkill } from '../../runtime/executor.js';
+export function scan(program) {
+    program
+        .command('scan <path>')
+        .description(chalk.cyan('Security audit of a skill file or directory'))
+        .option('--json', 'Output as JSON')
+        .option('--safe-only', 'Only show safe skills')
+        .option('-V, --verbose', 'Verbose output')
+        .action(async (path, options) => {
+        try {
+            const fullPath = resolve(process.cwd(), path);
+            const spinner = ora(t('scan.scanning')).start();
+            // Determine if path is file or directory
+            const stat = await fs.stat(fullPath);
+            if (stat.isDirectory()) {
+                // Scan directory
+                await scanDirectory(fullPath, options);
+            }
+            else if (stat.isFile()) {
+                // Scan single file
+                const result = await scanSkill(fullPath);
+                spinner.stop();
+                displayScanResult(result, fullPath, options);
+            }
+            else {
+                spinner.fail(chalk.red(t('error.invalidPath')));
+                process.exit(1);
+            }
+        }
+        catch (error) {
+            console.error(chalk.red(t('error.scanFailed')), error);
+            process.exit(1);
+        }
+    });
+}
+async function scanDirectory(dir, options) {
+    const files = await fs.readdir(dir, { recursive: true });
+    const skillFiles = files.filter((f) => typeof f === 'string' && (f.endsWith('.md') || f.endsWith('.skill')));
+    if (skillFiles.length === 0) {
+        console.log(chalk.yellow(t('scan.noSkillsFound')));
+        return;
+    }
+    console.log(chalk.cyan.bold(`\n🔍 Scanning ${skillFiles.length} skills...\n`));
+    const results = [];
+    for (const file of skillFiles) {
+        const spinner = ora(`Scanning ${file}`).start();
+        try {
+            const filePath = resolve(dir, file);
+            const result = await scanSkill(filePath);
+            if (!options.safeOnly || result.score >= 80) {
+                results.push({ file, result });
+            }
+            spinner.succeed();
+        }
+        catch (error) {
+            spinner.warn(`Failed to scan ${file}`);
+        }
+    }
+    // Display summary table
+    console.log(chalk.bold('\n📊 Scan Results:\n'));
+    console.log(chalk.gray('┌─────────────────────────────┬────────┬──────────────┐\n' +
+        '│ Skill                       │ Score  │ Threats      │\n' +
+        '├─────────────────────────────┼────────┼──────────────┤'));
+    results.forEach(({ file, result }) => {
+        const scoreColor = result.score >= 80 ? chalk.green : result.score >= 50 ? chalk.yellow : chalk.red;
+        const threatCount = result.threats.length;
+        const skillName = file.split('/').pop() || file;
+        console.log(`│ ${skillName.padEnd(27)} │ ${scoreColor(String(Math.round(result.score)).padEnd(6))} │ ${String(threatCount).padEnd(12)} │`);
+    });
+    console.log(chalk.gray('└─────────────────────────────┴────────┴──────────────┘\n'));
+    if (options.json) {
+        console.log(JSON.stringify(results.map(({ file, result }) => ({
+            file,
+            score: result.score,
+            threats: result.threats,
+        })), null, 2));
+    }
+}
+function displayScanResult(result, filePath, options) {
+    const fileName = filePath.split('/').pop() || filePath;
+    // Score badge
+    const scoreColor = result.score >= 80 ? chalk.bgGreen : result.score >= 50 ? chalk.bgYellow : chalk.bgRed;
+    const scoreLabel = result.score >= 80
+        ? 'SAFE'
+        : result.score >= 50
+            ? 'CAUTION'
+            : 'UNSAFE';
+    console.log(chalk.bold.cyan(`\n🔐 Security Scan: ${fileName}\n`));
+    console.log(`  Overall Score: ${scoreColor.black(` ${Math.round(result.score)} `)} (${scoreLabel})\n`);
+    // Threats
+    if (result.threats.length > 0) {
+        console.log(chalk.bold('⚠️  Detected Threats:\n'));
+        result.threats.forEach((threat, idx) => {
+            const severityColor = threat.severity === 'critical'
+                ? chalk.bgRed.white
+                : threat.severity === 'high'
+                    ? chalk.bgYellow.black
+                    : chalk.bgBlue.white;
+            console.log(`  ${idx + 1}. ${severityColor(` ${threat.severity.toUpperCase()} `)}`);
+            console.log(`     Description: ${threat.description}`);
+            console.log(`     Line: ${threat.line}\n`);
+        });
+    }
+    else {
+        console.log(chalk.green('✓ No threats detected\n'));
+    }
+    // Recommendations
+    console.log(chalk.bold('💡 Recommendations:\n'));
+    if (result.threats.length === 0) {
+        console.log(chalk.green('  ✓ This skill is safe to use'));
+    }
+    else {
+        const critical = result.threats.filter((t) => t.severity === 'critical').length;
+        const high = result.threats.filter((t) => t.severity === 'high').length;
+        if (critical > 0) {
+            console.log(chalk.red(`  ✗ Fix ${critical} critical issue(s) before using`));
+        }
+        if (high > 0) {
+            console.log(chalk.yellow(`  ⚠ Review ${high} high-severity issue(s)`));
+        }
+        console.log('  • Run with --no-scan to bypass (not recommended)');
+        console.log('  • Contact the skill author for fixes');
+    }
+    if (options.json) {
+        console.log(JSON.stringify(result, null, 2));
+    }
+}
+//# sourceMappingURL=scan.js.map