vskill 0.1.0

package/dist/api/client.d.ts

@@ -0,0 +1,50 @@
+export interface SkillSearchResult {
+    name: string;
+    author: string;
+    tier: string;
+    score: number;
+    installs: number;
+    description: string;
+}
+export interface SkillDetail {
+    name: string;
+    author: string;
+    tier: string;
+    score: number;
+    version: string;
+    sha: string;
+    description: string;
+    content?: string;
+    installs: number;
+    updatedAt: string;
+}
+export interface SubmissionResponse {
+    id: string;
+    status: string;
+    trackingUrl: string;
+}
+export interface SubmissionRequest {
+    repoUrl: string;
+    skillName?: string;
+    email?: string;
+}
+/**
+ * Search for skills in the registry.
+ */
+export declare function searchSkills(query: string): Promise<SkillSearchResult[]>;
+/**
+ * Get a single skill by name.
+ */
+export declare function getSkill(name: string): Promise<SkillDetail>;
+/**
+ * Submit a skill for verification.
+ */
+export declare function submitSkill(data: SubmissionRequest): Promise<SubmissionResponse>;
+/**
+ * Get the status of a submission.
+ */
+export declare function getSubmission(id: string): Promise<{
+    id: string;
+    status: string;
+    result?: unknown;
+}>;

package/dist/api/client.js

@@ -0,0 +1,50 @@
+// ---------------------------------------------------------------------------
+// HTTP client for verified-skill.com API
+// ---------------------------------------------------------------------------
+const BASE_URL = "https://verified-skill.com";
+async function apiRequest(path, options) {
+    const url = `${BASE_URL}${path}`;
+    const res = await fetch(url, {
+        ...options,
+        headers: {
+            "Content-Type": "application/json",
+            "User-Agent": "vskill-cli",
+            ...options?.headers,
+        },
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`API request failed: ${res.status} ${res.statusText}${body ? ` - ${body}` : ""}`);
+    }
+    return res.json();
+}
+/**
+ * Search for skills in the registry.
+ */
+export async function searchSkills(query) {
+    const encoded = encodeURIComponent(query);
+    return apiRequest(`/api/v1/skills?search=${encoded}`);
+}
+/**
+ * Get a single skill by name.
+ */
+export async function getSkill(name) {
+    const encoded = encodeURIComponent(name);
+    return apiRequest(`/api/v1/skills/${encoded}`);
+}
+/**
+ * Submit a skill for verification.
+ */
+export async function submitSkill(data) {
+    return apiRequest("/api/v1/submissions", {
+        method: "POST",
+        body: JSON.stringify(data),
+    });
+}
+/**
+ * Get the status of a submission.
+ */
+export async function getSubmission(id) {
+    return apiRequest(`/api/v1/submissions/${encodeURIComponent(id)}`);
+}
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAoC9C,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,OAAqB;IAErB,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,GAAG,OAAO;QACV,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,YAAY;YAC1B,GAAG,OAAO,EAAE,OAAO;SACpB;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa;IAEb,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,UAAU,CACf,yBAAyB,OAAO,EAAE,CACnC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,UAAU,CAAc,kBAAkB,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAuB;IAEvB,OAAO,UAAU,CAAqB,qBAAqB,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAU;IAEV,OAAO,UAAU,CAAC,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/commands/add.d.ts

@@ -0,0 +1,7 @@
+interface AddOptions {
+    skill?: string;
+    global?: boolean;
+    force?: boolean;
+}
+export declare function addCommand(source: string, opts: AddOptions): Promise<void>;
+export {};

package/dist/commands/add.js

@@ -0,0 +1,126 @@
+// ---------------------------------------------------------------------------
+// vskill add -- install a skill from GitHub with security scanning
+// ---------------------------------------------------------------------------
+import { mkdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { detectInstalledAgents } from "../agents/agents-registry.js";
+import { ensureLockfile, writeLockfile } from "../lockfile/index.js";
+import { runTier1Scan } from "../scanner/index.js";
+import { bold, green, red, yellow, dim, cyan, spinner, } from "../utils/output.js";
+async function fetchSkillContent(url) {
+    const spin = spinner("Fetching skill");
+    try {
+        const res = await fetch(url);
+        if (!res.ok) {
+            spin.stop();
+            if (res.status === 404) {
+                console.error(red(`SKILL.md not found at ${url}\n`) +
+                    dim("Make sure the repo exists and has a SKILL.md on the main branch."));
+            }
+            else {
+                console.error(red(`Failed to fetch: ${res.status} ${res.statusText}`));
+            }
+            return process.exit(1);
+        }
+        const content = await res.text();
+        spin.stop(green("Fetched SKILL.md"));
+        return content;
+    }
+    catch (err) {
+        spin.stop();
+        console.error(red("Network error: ") + dim(err.message));
+        return process.exit(1);
+    }
+}
+export async function addCommand(source, opts) {
+    // Parse owner/repo
+    const parts = source.split("/");
+    if (parts.length !== 2) {
+        console.error(red("Invalid source format. Use: ") + cyan("owner/repo"));
+        process.exit(1);
+    }
+    const [owner, repo] = parts;
+    const skillSubpath = opts.skill
+        ? `skills/${opts.skill}/SKILL.md`
+        : "SKILL.md";
+    const url = `https://raw.githubusercontent.com/${owner}/${repo}/main/${skillSubpath}`;
+    // Fetch SKILL.md
+    const content = await fetchSkillContent(url);
+    // Run tier1 scan
+    console.log(dim("\nRunning security scan..."));
+    const scanResult = runTier1Scan(content);
+    const verdictColor = scanResult.verdict === "PASS"
+        ? green
+        : scanResult.verdict === "CONCERNS"
+            ? yellow
+            : red;
+    console.log(`${bold("Score:")} ${verdictColor(String(scanResult.score))}/100  ` +
+        `${bold("Verdict:")} ${verdictColor(scanResult.verdict)}\n`);
+    if (scanResult.findings.length > 0) {
+        console.log(dim(`Found ${scanResult.findings.length} issue${scanResult.findings.length === 1 ? "" : "s"}: ` +
+            `${scanResult.criticalCount} critical, ${scanResult.highCount} high, ${scanResult.mediumCount} medium`));
+    }
+    // Decision based on verdict
+    if (scanResult.verdict === "FAIL" && !opts.force) {
+        console.error(red("\nScan FAILED. Refusing to install.\n") +
+            dim("Use --force to install anyway (not recommended)."));
+        process.exit(1);
+    }
+    if (scanResult.verdict === "CONCERNS" && !opts.force) {
+        console.error(yellow("\nScan found CONCERNS. Refusing to install.\n") +
+            dim("Use --force to install anyway."));
+        process.exit(1);
+    }
+    if (scanResult.verdict === "FAIL" && opts.force) {
+        console.log(yellow("\n--force: installing despite FAIL verdict.\n"));
+    }
+    if (scanResult.verdict === "CONCERNS" && opts.force) {
+        console.log(yellow("\n--force: installing despite CONCERNS.\n"));
+    }
+    // Detect installed agents
+    const agents = await detectInstalledAgents();
+    if (agents.length === 0) {
+        console.error(red("No AI agents detected. Run ") +
+            cyan("vskill init") +
+            red(" first."));
+        process.exit(1);
+    }
+    // Install to each agent
+    const skillName = opts.skill || repo;
+    const sha = createHash("sha256").update(content).digest("hex").slice(0, 12);
+    const locations = [];
+    for (const agent of agents) {
+        const baseDir = opts.global
+            ? agent.globalSkillsDir
+            : join(process.cwd(), agent.localSkillsDir);
+        const skillDir = join(baseDir, skillName);
+        try {
+            mkdirSync(skillDir, { recursive: true });
+            writeFileSync(join(skillDir, "SKILL.md"), content, "utf-8");
+            locations.push(`${agent.displayName}: ${skillDir}`);
+        }
+        catch (err) {
+            console.error(yellow(`Failed to write to ${agent.displayName}: `) +
+                dim(err.message));
+        }
+    }
+    // Update lockfile
+    const lock = ensureLockfile();
+    lock.skills[skillName] = {
+        version: "0.0.0",
+        sha,
+        tier: "SCANNED",
+        installedAt: new Date().toISOString(),
+        source: `github:${owner}/${repo}`,
+    };
+    lock.agents = agents.map((a) => a.id);
+    writeLockfile(lock);
+    // Print summary
+    console.log(green(`\nInstalled ${bold(skillName)} to ${locations.length} agent${locations.length === 1 ? "" : "s"}:\n`));
+    for (const loc of locations) {
+        console.log(`  ${dim(">")} ${loc}`);
+    }
+    console.log(dim(`\nSHA: ${sha}`));
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,IAAI,EACJ,KAAK,EACL,GAAG,EACH,MAAM,EACN,GAAG,EACH,IAAI,EACJ,OAAO,GACR,MAAM,oBAAoB,CAAC;AAQ5B,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,yBAAyB,GAAG,IAAI,CAAC;oBACnC,GAAG,CAAC,kEAAkE,CAAC,CAC1E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,IAAgB;IAEhB,mBAAmB;IACnB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK;QAC7B,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,WAAW;QACjC,CAAC,CAAC,UAAU,CAAC;IACf,MAAM,GAAG,GAAG,qCAAqC,KAAK,IAAI,IAAI,SAAS,YAAY,EAAE,CAAC;IAEtF,iBAAiB;IACjB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE7C,iBAAiB;IACjB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAEzC,MAAM,YAAY,GAChB,UAAU,CAAC,OAAO,KAAK,MAAM;QAC3B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,UAAU;YACjC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,GAAG,CAAC;IAEZ,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ;QACjE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAC9D,CAAC;IAEF,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CACT,GAAG,CACD,SAAS,UAAU,CAAC,QAAQ,CAAC,MAAM,SAAS,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI;YACzF,GAAG,UAAU,CAAC,aAAa,cAAc,UAAU,CAAC,SAAS,UAAU,UAAU,CAAC,WAAW,SAAS,CACzG,CACF,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACjD,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,uCAAuC,CAAC;YAC1C,GAAG,CAAC,kDAAkD,CAAC,CAC1D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,CACX,MAAM,CAAC,+CAA+C,CAAC;YACrD,GAAG,CAAC,gCAAgC,CAAC,CACxC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,+CAA+C,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,0BAA0B;IAC1B,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,6BAA6B,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC;YACnB,GAAG,CAAC,SAAS,CAAC,CACjB,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM;YACzB,CAAC,CAAC,KAAK,CAAC,eAAe;YACvB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE1C,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,MAAM,CAAC,sBAAsB,KAAK,CAAC,WAAW,IAAI,CAAC;gBACjD,GAAG,CAAE,GAAa,CAAC,OAAO,CAAC,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG;QACvB,OAAO,EAAE,OAAO;QAChB,GAAG;QACH,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,EAAE;KAClC,CAAC;IACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpB,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,OAAO,SAAS,CAAC,MAAM,SAAS,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACzH,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/commands/find.d.ts

@@ -0,0 +1 @@
+export declare function findCommand(query: string): Promise<void>;

package/dist/commands/find.js

@@ -0,0 +1,42 @@
+// ---------------------------------------------------------------------------
+// vskill find -- search the verified-skill.com registry
+// ---------------------------------------------------------------------------
+import { searchSkills } from "../api/client.js";
+import { bold, green, yellow, dim, cyan, red, table } from "../utils/output.js";
+export async function findCommand(query) {
+    console.log(dim(`Searching for "${query}"...\n`));
+    let results;
+    try {
+        const response = await searchSkills(query);
+        results = Array.isArray(response) ? response : [];
+    }
+    catch (err) {
+        console.error(red("Failed to search registry: ") +
+            dim(err.message));
+        process.exit(1);
+        return;
+    }
+    if (results.length === 0) {
+        console.log(dim("No skills found matching your query."));
+        console.log(dim(`Try a broader search or visit ${cyan("https://verified-skill.com")}`));
+        return;
+    }
+    const headers = ["Name", "Author", "Tier", "Score", "Installs"];
+    const rows = results.map((r) => {
+        const tierColor = r.tier === "CERTIFIED"
+            ? yellow
+            : r.tier === "VERIFIED"
+                ? green
+                : dim;
+        return [
+            bold(r.name),
+            r.author || "-",
+            tierColor(r.tier || "SCANNED"),
+            String(r.score ?? "-"),
+            String(r.installs ?? 0),
+        ];
+    });
+    console.log(table(headers, rows));
+    console.log(dim(`\n${results.length} result${results.length === 1 ? "" : "s"} found`));
+}
+//# sourceMappingURL=find.js.map

package/dist/commands/find.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"find.js","sourceRoot":"","sources":["../../src/commands/find.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa;IAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC;IAElD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,6BAA6B,CAAC;YAChC,GAAG,CAAE,GAAa,CAAC,OAAO,CAAC,CAC9B,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,iCAAiC,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAC3E,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,SAAS,GACb,CAAC,CAAC,IAAI,KAAK,WAAW;YACpB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;gBACrB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,GAAG,CAAC;QACZ,OAAO;YACL,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACZ,CAAC,CAAC,MAAM,IAAI,GAAG;YACf,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;YAC9B,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;YACtB,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,UAAU,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1 @@
+export declare function initCommand(): Promise<void>;

package/dist/commands/init.js

@@ -0,0 +1,39 @@
+// ---------------------------------------------------------------------------
+// vskill init -- detect agents and create lockfile
+// ---------------------------------------------------------------------------
+import { detectInstalledAgents, TOTAL_AGENTS, } from "../agents/agents-registry.js";
+import { readLockfile, writeLockfile, ensureLockfile } from "../lockfile/index.js";
+import { bold, green, dim, cyan, table } from "../utils/output.js";
+export async function initCommand() {
+    console.log(bold("Detecting installed AI agents...\n"));
+    const agents = await detectInstalledAgents();
+    if (agents.length === 0) {
+        console.log(dim(`No agents detected out of ${TOTAL_AGENTS} known agents.`));
+        console.log(dim("Install an AI agent (Claude Code, Cursor, etc.) and re-run.\n"));
+    }
+    else {
+        const headers = ["Agent", "Company", "Skills Dir"];
+        const rows = agents.map((a) => [
+            green(a.displayName),
+            dim(a.parentCompany || "-"),
+            dim(a.localSkillsDir),
+        ]);
+        console.log(table(headers, rows));
+        console.log(`\n${green(`${agents.length}`)} agent${agents.length === 1 ? "" : "s"} detected out of ${TOTAL_AGENTS} known\n`);
+    }
+    // Create or update lockfile
+    const existing = readLockfile();
+    if (existing) {
+        existing.agents = agents.map((a) => a.id);
+        writeLockfile(existing);
+        console.log(dim("Updated existing vskill.lock"));
+    }
+    else {
+        const lock = ensureLockfile();
+        lock.agents = agents.map((a) => a.id);
+        writeLockfile(lock);
+        console.log(green("Created vskill.lock"));
+    }
+    console.log(dim(`\nRun ${cyan("vskill add <owner/repo>")} to install a skill.`));
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,OAAO,EACL,qBAAqB,EACrB,YAAY,GACb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAE7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,6BAA6B,YAAY,gBAAgB,CAAC,CAC/D,CAAC;QACF,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,+DAA+D,CAAC,CACrE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YACpB,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;YAC3B,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC;SACtB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oBAAoB,YAAY,UAAU,CAChH,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtC,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,SAAS,IAAI,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CACpE,CAAC;AACJ,CAAC"}

package/dist/commands/list.d.ts

@@ -0,0 +1,6 @@
+interface ListOptions {
+    agents?: boolean;
+    json?: boolean;
+}
+export declare function listCommand(opts: ListOptions): Promise<void>;
+export {};

package/dist/commands/list.js

@@ -0,0 +1,79 @@
+// ---------------------------------------------------------------------------
+// vskill list -- show installed skills or detected agents
+// ---------------------------------------------------------------------------
+import { readLockfile } from "../lockfile/index.js";
+import { detectInstalledAgents, AGENTS_REGISTRY, } from "../agents/agents-registry.js";
+import { bold, green, dim, cyan, yellow, table } from "../utils/output.js";
+export async function listCommand(opts) {
+    if (opts.agents) {
+        await listAgents(opts.json);
+    }
+    else {
+        await listSkills(opts.json);
+    }
+}
+async function listAgents(json) {
+    const installed = await detectInstalledAgents();
+    const installedIds = new Set(installed.map((a) => a.id));
+    if (json) {
+        const data = AGENTS_REGISTRY.map((a) => ({
+            id: a.id,
+            name: a.displayName,
+            company: a.parentCompany || null,
+            installed: installedIds.has(a.id),
+            universal: a.isUniversal,
+            localDir: a.localSkillsDir,
+        }));
+        console.log(JSON.stringify(data, null, 2));
+        return;
+    }
+    console.log(bold(`AI Agents (${AGENTS_REGISTRY.length} known)\n`));
+    const headers = ["Status", "Agent", "Company", "Type"];
+    const rows = AGENTS_REGISTRY.map((a) => [
+        installedIds.has(a.id) ? green("*") : dim("-"),
+        installedIds.has(a.id) ? bold(a.displayName) : a.displayName,
+        dim(a.parentCompany || "-"),
+        a.isUniversal ? cyan("universal") : dim("custom"),
+    ]);
+    console.log(table(headers, rows));
+    console.log(`\n${green(`${installed.length}`)} installed  ${dim(`${AGENTS_REGISTRY.length} total`)}`);
+}
+async function listSkills(json) {
+    const lock = readLockfile();
+    if (!lock) {
+        console.log(yellow("No vskill.lock found. Run ") +
+            cyan("vskill init") +
+            yellow(" first."));
+        process.exit(1);
+        return; // unreachable but satisfies TS
+    }
+    const skillNames = Object.keys(lock.skills);
+    if (json) {
+        console.log(JSON.stringify(lock.skills, null, 2));
+        return;
+    }
+    if (skillNames.length === 0) {
+        console.log(dim("No skills installed yet."));
+        console.log(dim(`Run ${cyan("vskill add <owner/repo>")} to install a skill.`));
+        return;
+    }
+    console.log(bold(`Installed Skills (${skillNames.length})\n`));
+    const headers = ["Skill", "Version", "Tier", "Source", "Installed"];
+    const rows = skillNames.map((name) => {
+        const s = lock.skills[name];
+        const tierColor = s.tier === "CERTIFIED"
+            ? yellow
+            : s.tier === "VERIFIED"
+                ? green
+                : dim;
+        return [
+            bold(name),
+            s.version || "-",
+            tierColor(s.tier || "SCANNED"),
+            dim(s.source || "-"),
+            dim(s.installedAt ? new Date(s.installedAt).toLocaleDateString() : "-"),
+        ];
+    });
+    console.log(table(headers, rows));
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAOhF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAiB;IACjD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEzD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,WAAW;YACnB,OAAO,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;YAChC,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,SAAS,EAAE,CAAC,CAAC,WAAW;YACxB,QAAQ,EAAE,CAAC,CAAC,cAAc;SAC3B,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,eAAe,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACtC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9C,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;QAC5D,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;QAC3B,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;KAClD,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,GAAG,CAAC,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,EAAE,CACzF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAE5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,4BAA4B,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC;YACnB,MAAM,CAAC,SAAS,CAAC,CACpB,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,CAAC,+BAA+B;IACzC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,OAAO,IAAI,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAClE,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,SAAS,GACb,CAAC,CAAC,IAAI,KAAK,WAAW;YACpB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;gBACrB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,GAAG,CAAC;QACZ,OAAO;YACL,IAAI,CAAC,IAAI,CAAC;YACV,CAAC,CAAC,OAAO,IAAI,GAAG;YAChB,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;YAC9B,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;YACpB,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACxE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/commands/scan.d.ts

@@ -0,0 +1 @@
+export declare function scanCommand(path: string): Promise<void>;

package/dist/commands/scan.js

@@ -0,0 +1,99 @@
+// ---------------------------------------------------------------------------
+// vskill scan -- run tier1 security scan on a SKILL.md
+// ---------------------------------------------------------------------------
+import { readFileSync, existsSync, statSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { runTier1Scan } from "../scanner/index.js";
+import { bold, green, red, yellow, dim, cyan, table } from "../utils/output.js";
+export async function scanCommand(path) {
+    const resolved = resolve(path);
+    const filePath = resolveSkillPath(resolved);
+    if (!filePath) {
+        process.exit(2);
+    }
+    const content = readFileSync(filePath, "utf-8");
+    console.log(bold(`Scanning ${dim(filePath)}\n`));
+    const result = runTier1Scan(content);
+    // Print verdict
+    const verdictColor = result.verdict === "PASS"
+        ? green
+        : result.verdict === "CONCERNS"
+            ? yellow
+            : red;
+    console.log(`${bold("Score:")} ${verdictColor(String(result.score))}/100  ` +
+        `${bold("Verdict:")} ${verdictColor(result.verdict)}  ` +
+        `${bold("Patterns:")} ${result.patternsChecked}  ` +
+        `${bold("Time:")} ${result.durationMs}ms\n`);
+    // Print findings summary
+    if (result.findings.length === 0) {
+        console.log(green("No security issues found.\n"));
+    }
+    else {
+        const summary = [
+            result.criticalCount > 0
+                ? red(`${result.criticalCount} critical`)
+                : null,
+            result.highCount > 0
+                ? yellow(`${result.highCount} high`)
+                : null,
+            result.mediumCount > 0
+                ? cyan(`${result.mediumCount} medium`)
+                : null,
+            result.lowCount > 0
+                ? dim(`${result.lowCount} low`)
+                : null,
+            result.infoCount > 0
+                ? dim(`${result.infoCount} info`)
+                : null,
+        ]
+            .filter(Boolean)
+            .join("  ");
+        console.log(`${bold("Findings:")} ${summary}\n`);
+        // Print detailed findings
+        printFindings(result.findings);
+    }
+    // Exit code
+    if (result.verdict === "FAIL")
+        process.exit(2);
+    if (result.verdict === "CONCERNS")
+        process.exit(1);
+    process.exit(0);
+}
+function resolveSkillPath(resolved) {
+    if (existsSync(resolved) && statSync(resolved).isDirectory()) {
+        const candidate = join(resolved, "SKILL.md");
+        if (existsSync(candidate)) {
+            return candidate;
+        }
+        console.error(red(`No SKILL.md found in ${resolved}`));
+        return null;
+    }
+    if (existsSync(resolved)) {
+        return resolved;
+    }
+    console.error(red(`File not found: ${resolved}`));
+    return null;
+}
+function printFindings(findings) {
+    const severityOrder = { critical: 0, high: 1, medium: 2, low: 3, info: 4 };
+    const sorted = [...findings].sort((a, b) => severityOrder[a.severity] - severityOrder[b.severity]);
+    const headers = ["Severity", "Pattern", "Category", "Line", "Match"];
+    const rows = sorted.map((f) => {
+        const sevColor = f.severity === "critical"
+            ? red
+            : f.severity === "high"
+                ? yellow
+                : f.severity === "medium"
+                    ? cyan
+                    : dim;
+        return [
+            sevColor(f.severity.toUpperCase()),
+            f.patternName,
+            dim(f.category),
+            String(f.lineNumber),
+            dim(f.match.substring(0, 40)),
+        ];
+    });
+    console.log(table(headers, rows));
+}
+//# sourceMappingURL=scan.js.map

package/dist/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAErC,gBAAgB;IAChB,MAAM,YAAY,GAChB,MAAM,CAAC,OAAO,KAAK,MAAM;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU;YAC7B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,GAAG,CAAC;IAEZ,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ;QAC7D,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;QACvD,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI;QAClD,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,UAAU,MAAM,CAC9C,CAAC;IAEF,yBAAyB;IACzB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG;YACd,MAAM,CAAC,aAAa,GAAG,CAAC;gBACtB,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,aAAa,WAAW,CAAC;gBACzC,CAAC,CAAC,IAAI;YACR,MAAM,CAAC,SAAS,GAAG,CAAC;gBAClB,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,OAAO,CAAC;gBACpC,CAAC,CAAC,IAAI;YACR,MAAM,CAAC,WAAW,GAAG,CAAC;gBACpB,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,SAAS,CAAC;gBACtC,CAAC,CAAC,IAAI;YACR,MAAM,CAAC,QAAQ,GAAG,CAAC;gBACjB,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,MAAM,CAAC;gBAC/B,CAAC,CAAC,IAAI;YACR,MAAM,CAAC,SAAS,GAAG,CAAC;gBAClB,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,OAAO,CAAC;gBACjC,CAAC,CAAC,IAAI;SACT;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC;QAEjD,0BAA0B;QAC1B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,QAAuB;IAC5C,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAChE,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,QAAQ,GACZ,CAAC,CAAC,QAAQ,KAAK,UAAU;YACvB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM;gBACrB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBACvB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,GAAG,CAAC;QACd,OAAO;YACL,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAClC,CAAC,CAAC,WAAW;YACb,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YACf,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YACpB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/commands/submit.d.ts

@@ -0,0 +1,5 @@
+interface SubmitOptions {
+    email?: string;
+}
+export declare function submitCommand(source: string, opts: SubmitOptions): Promise<void>;
+export {};

package/dist/commands/submit.js

@@ -0,0 +1,34 @@
+// ---------------------------------------------------------------------------
+// vskill submit -- submit a skill for verification
+// ---------------------------------------------------------------------------
+import { submitSkill } from "../api/client.js";
+import { bold, green, red, dim, cyan } from "../utils/output.js";
+export async function submitCommand(source, opts) {
+    // Parse owner/repo
+    const parts = source.split("/");
+    if (parts.length !== 2) {
+        console.error(red("Invalid source format. Use: ") + cyan("owner/repo"));
+        process.exit(1);
+    }
+    const [owner, repo] = parts;
+    const repoUrl = `https://github.com/${owner}/${repo}`;
+    console.log(dim(`Submitting ${bold(`${owner}/${repo}`)} for verification...\n`));
+    try {
+        const result = await submitSkill({
+            repoUrl,
+            skillName: repo,
+            email: opts.email,
+        });
+        console.log(green("Submission received!\n"));
+        console.log(`${bold("Submission ID:")} ${result.id}`);
+        console.log(`${bold("Status:")}        ${result.status}`);
+        console.log(`${bold("Track at:")}      ${cyan(result.trackingUrl || `https://verified-skill.com/submissions/${result.id}`)}`);
+        console.log(dim("\nYou will receive updates as the review progresses."));
+    }
+    catch (err) {
+        console.error(red("Submission failed: ") +
+            dim(err.message));
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=submit.js.map

package/dist/commands/submit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit.js","sourceRoot":"","sources":["../../src/commands/submit.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAMjE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAmB;IAEnB,mBAAmB;IACnB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CACzD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC5B,MAAM,OAAO,GAAG,sBAAsB,KAAK,IAAI,IAAI,EAAE,CAAC;IAEtD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,OAAO;YACP,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,0CAA0C,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,CACjH,CAAC;QACF,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,sDAAsD,CAAC,CAC5D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,qBAAqB,CAAC;YACxB,GAAG,CAAE,GAAa,CAAC,OAAO,CAAC,CAC9B,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/update.d.ts

@@ -0,0 +1,5 @@
+interface UpdateOptions {
+    all?: boolean;
+}
+export declare function updateCommand(skill: string | undefined, opts: UpdateOptions): Promise<void>;
+export {};