vskill 1.2.4 → 1.2.7

package/dist/agents/global-dirs.d.ts

@@ -0,0 +1,19 @@
+import type { AgentDefinition } from "./agents-registry.js";
+/** Antigravity's legacy IDE global skills folder. */
+export declare const ANTIGRAVITY_LEGACY_GLOBAL_DIR = "~/.gemini/antigravity/skills";
+type AgentDirs = Pick<AgentDefinition, "id" | "globalSkillsDir">;
+/**
+ * The global skills dir vskill installs an agent's skills into. Antigravity:
+ * `VSKILL_ANTIGRAVITY_SKILLS_DIR`, then the legacy IDE dir when it already
+ * exists, else the registry default. Every other agent: its `globalSkillsDir`.
+ */
+export declare function resolveAgentGlobalSkillsDir(agent: AgentDirs, expand?: (p: string) => string): string;
+/**
+ * Every global dir vskill may have put this agent's skills in: the resolved
+ * dir first, then the registry default and, for Antigravity, the legacy IDE
+ * dir (installs went there while it existed). Used by remove, uninstall,
+ * Studio scans and detection so none of them miss an install. `expand`
+ * resolves a `~/` path (callers pass their own tilde resolver).
+ */
+export declare function agentGlobalInstallDirs(agent: AgentDirs, expand?: (p: string) => string): string[];
+export {};

package/dist/agents/global-dirs.js

@@ -0,0 +1,53 @@
+// ---------------------------------------------------------------------------
+// 0894: one resolver for an agent's global skills dir(s).
+//
+// Kept apart from agents-registry.ts on purpose: many command tests mock the
+// registry module wholesale, and callers (remove, add, Studio scans) need
+// these helpers to keep working under those mocks. Pure: depends only on the
+// agent definition, $HOME and the filesystem.
+// ---------------------------------------------------------------------------
+import { existsSync } from "node:fs";
+/** Antigravity's legacy IDE global skills folder. */
+export const ANTIGRAVITY_LEGACY_GLOBAL_DIR = "~/.gemini/antigravity/skills";
+function expandHome(p) {
+    if (p.startsWith("~/")) {
+        const home = process.env.HOME || process.env.USERPROFILE || "";
+        return home + p.slice(1);
+    }
+    return p;
+}
+/**
+ * The global skills dir vskill installs an agent's skills into. Antigravity:
+ * `VSKILL_ANTIGRAVITY_SKILLS_DIR`, then the legacy IDE dir when it already
+ * exists, else the registry default. Every other agent: its `globalSkillsDir`.
+ */
+export function resolveAgentGlobalSkillsDir(agent, expand = expandHome) {
+    if (agent.id === "antigravity") {
+        const override = process.env.VSKILL_ANTIGRAVITY_SKILLS_DIR;
+        if (override && override.trim().length > 0)
+            return override.trim();
+        const legacy = expand(ANTIGRAVITY_LEGACY_GLOBAL_DIR);
+        try {
+            if (existsSync(legacy))
+                return legacy;
+        }
+        catch {
+            // fall through to the default
+        }
+    }
+    return expand(agent.globalSkillsDir);
+}
+/**
+ * Every global dir vskill may have put this agent's skills in: the resolved
+ * dir first, then the registry default and, for Antigravity, the legacy IDE
+ * dir (installs went there while it existed). Used by remove, uninstall,
+ * Studio scans and detection so none of them miss an install. `expand`
+ * resolves a `~/` path (callers pass their own tilde resolver).
+ */
+export function agentGlobalInstallDirs(agent, expand = expandHome) {
+    const dirs = [resolveAgentGlobalSkillsDir(agent, expand), expand(agent.globalSkillsDir)];
+    if (agent.id === "antigravity")
+        dirs.push(expand(ANTIGRAVITY_LEGACY_GLOBAL_DIR));
+    return [...new Set(dirs)];
+}
+//# sourceMappingURL=global-dirs.js.map

package/dist/agents/global-dirs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-dirs.js","sourceRoot":"","sources":["../../src/agents/global-dirs.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,8CAA8C;AAC9C,8EAA8E;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,qDAAqD;AACrD,MAAM,CAAC,MAAM,6BAA6B,GAAG,8BAA8B,CAAC;AAI5E,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC/D,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAgB,EAChB,SAAgC,UAAU;IAE1C,IAAI,KAAK,CAAC,EAAE,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;QAC3D,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAgB,EAChB,SAAgC,UAAU;IAE1C,MAAM,IAAI,GAAG,CAAC,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IACzF,IAAI,KAAK,CAAC,EAAE,KAAK,aAAa;QAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC"}

package/dist/audit/fix-suggestions.js

@@ -44,6 +44,12 @@ export const FIX_SUGGESTIONS = {
     "CE-001": "Replace eval() with JSON.parse() for data or Function constructor for code; never eval user input",
     "CE-002": "Avoid new Function(); use explicit function definitions instead",
     "CE-003": "Avoid dynamic imports with user-controlled paths; use a module allowlist",
+    "CE-004": "Never unpickle or exec decoded data; use a safe format such as JSON and import modules statically",
+    "CI-009": "Call subprocess with an argument list and shell=False instead of os.system/os.popen or shell=True",
+    "CI-010": "Avoid Invoke-Expression and encoded PowerShell commands; run reviewed scripts with explicit parameters",
+    "CI-011": "Download the PowerShell script, review it, then run it by path instead of piping irm/iwr output into iex",
+    "NA-004": "Do not ask users to download and run external binaries or scripts as a prerequisite; ship reviewed code with the skill or name a package-manager install",
+    "NA-005": "Do not distribute password-protected archives; publish contents that can be reviewed and scanned",
     // --- DCI-abuse patterns ---
     "DCI-001": "Remove DCI blocks that read credential files (~/.ssh/, ~/.aws/, .env); use a secrets manager instead",
     "DCI-002": "Remove DCI blocks that write to agent config files (CLAUDE.md, .claude/); legitimate skills do not modify agent configuration",

package/dist/audit/fix-suggestions.js.map

@@ -1 +1 @@
-{"version":3,"file":"fix-suggestions.js","sourceRoot":"","sources":["../../src/audit/fix-suggestions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,sCAAsC;IACtC,QAAQ,EAAE,sGAAsG;IAChH,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,+GAA+G;IACzH,QAAQ,EAAE,0FAA0F;IACpG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,yDAAyD;IACnE,QAAQ,EAAE,yEAAyE;IACnF,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,sFAAsF;IAChG,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,8EAA8E;IACxF,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,kFAAkF;IAC5F,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,iFAAiF;IAC3F,QAAQ,EAAE,mFAAmF;IAC7F,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,4FAA4F;IACtG,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,0EAA0E;IAEpF,6BAA6B;IAC7B,SAAS,EAAE,sGAAsG;IACjH,SAAS,EAAE,+HAA+H;IAC1I,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,8FAA8F;IACzG,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,4GAA4G;IACvH,SAAS,EAAE,mHAAmH;IAC9H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,oGAAoG;IAC/G,SAAS,EAAE,2GAA2G;IACtH,SAAS,EAAE,wGAAwG;IACnH,SAAS,EAAE,gHAAgH;IAE3H,0CAA0C;IAC1C,UAAU,EAAE,yFAAyF;IACrG,UAAU,EAAE,gFAAgF;IAC5F,UAAU,EAAE,sFAAsF;IAClG,UAAU,EAAE,8EAA8E;IAC1F,UAAU,EAAE,oFAAoF;IAChG,SAAS,EAAE,gEAAgE;IAC3E,SAAS,EAAE,+EAA+E;IAC1F,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,SAAS,EAAE,kFAAkF;IAC7F,SAAS,EAAE,yFAAyF;IACpG,SAAS,EAAE,qFAAqF;IAChG,QAAQ,EAAE,sEAAsE;IAChF,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,iGAAiG;IAC3G,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,6DAA6D;IACvE,QAAQ,EAAE,2EAA2E;CACtF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAwB,EACxB,GAAY;IAEZ,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAE1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"fix-suggestions.js","sourceRoot":"","sources":["../../src/audit/fix-suggestions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,sCAAsC;IACtC,QAAQ,EAAE,sGAAsG;IAChH,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,8FAA8F;IACxG,QAAQ,EAAE,+GAA+G;IACzH,QAAQ,EAAE,0FAA0F;IACpG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,yDAAyD;IACnE,QAAQ,EAAE,yEAAyE;IACnF,QAAQ,EAAE,gGAAgG;IAC1G,QAAQ,EAAE,sFAAsF;IAChG,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,uEAAuE;IACjF,QAAQ,EAAE,8EAA8E;IACxF,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,kFAAkF;IAC5F,QAAQ,EAAE,qFAAqF;IAC/F,QAAQ,EAAE,wEAAwE;IAClF,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,wFAAwF;IAClG,QAAQ,EAAE,gEAAgE;IAC1E,QAAQ,EAAE,iFAAiF;IAC3F,QAAQ,EAAE,mFAAmF;IAC7F,QAAQ,EAAE,yFAAyF;IACnG,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,4FAA4F;IACtG,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,iEAAiE;IAC3E,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,mGAAmG;IAC7G,QAAQ,EAAE,wGAAwG;IAClH,QAAQ,EAAE,0GAA0G;IACpH,QAAQ,EAAE,0JAA0J;IACpK,QAAQ,EAAE,kGAAkG;IAE5G,6BAA6B;IAC7B,SAAS,EAAE,sGAAsG;IACjH,SAAS,EAAE,+HAA+H;IAC1I,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,iHAAiH;IAC5H,SAAS,EAAE,8FAA8F;IACzG,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,4GAA4G;IACvH,SAAS,EAAE,mHAAmH;IAC9H,SAAS,EAAE,kHAAkH;IAC7H,SAAS,EAAE,oGAAoG;IAC/G,SAAS,EAAE,2GAA2G;IACtH,SAAS,EAAE,wGAAwG;IACnH,SAAS,EAAE,gHAAgH;IAE3H,0CAA0C;IAC1C,UAAU,EAAE,yFAAyF;IACrG,UAAU,EAAE,gFAAgF;IAC5F,UAAU,EAAE,sFAAsF;IAClG,UAAU,EAAE,8EAA8E;IAC1F,UAAU,EAAE,oFAAoF;IAChG,SAAS,EAAE,gEAAgE;IAC3E,SAAS,EAAE,+EAA+E;IAC1F,QAAQ,EAAE,uFAAuF;IACjG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,QAAQ,EAAE,6FAA6F;IACvG,SAAS,EAAE,kFAAkF;IAC7F,SAAS,EAAE,yFAAyF;IACpG,SAAS,EAAE,qFAAqF;IAChG,QAAQ,EAAE,sEAAsE;IAChF,QAAQ,EAAE,2EAA2E;IACrF,QAAQ,EAAE,4EAA4E;IACtF,QAAQ,EAAE,iGAAiG;IAC3G,QAAQ,EAAE,0EAA0E;IACpF,QAAQ,EAAE,6DAA6D;IACvE,QAAQ,EAAE,2EAA2E;CACtF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAwB,EACxB,GAAY;IAEZ,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAE1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/add-github-bundle.d.ts

@@ -0,0 +1,29 @@
+import { type FetchSkillBundleArgs, type GitHubSkillBundle } from "../discovery/github-skill-bundle.js";
+export interface BundleScanReport {
+    /** Files that block the install without --force, with the reasons. */
+    critical: Array<{
+        path: string;
+        findings: string[];
+    }>;
+    /** Files with non-blocking findings. */
+    flagged: string[];
+}
+/** ELF, Mach-O (thin + fat) or PE/COFF header. */
+export declare function isNativeExecutable(path: string, bytes: Uint8Array): boolean;
+export declare function scanSkillBundle(files: GitHubSkillBundle["files"], executables?: readonly string[]): BundleScanReport;
+export type PreparedBundle = {
+    ok: true;
+    bundle: GitHubSkillBundle;
+} | {
+    ok: false;
+    verdict: "BUNDLE_ERROR" | "FAIL";
+    message: string;
+};
+/**
+ * Download the skill folder and scan it. A failed download, a case
+ * collision or a blocking finding comes back as `ok: false`; an unlistable
+ * or over-limit folder comes back degraded with a warning printed.
+ */
+export declare function prepareGitHubSkillBundle(args: FetchSkillBundleArgs & {
+    force?: boolean;
+}): Promise<PreparedBundle>;

package/dist/commands/add-github-bundle.js

@@ -0,0 +1,135 @@
+// ---------------------------------------------------------------------------
+// 0894: fetch + scan the complete folder of a GitHub skill for `vskill install`.
+//
+// Every bundled file goes through the same Tier-1 scanner as SKILL.md. Text
+// is scanned as-is; files that are not valid UTF-8 are scanned lossily, so a
+// stray NUL or 0xFF byte cannot hide `curl … | bash` from the scan.
+//
+// Blocking (unless --force):
+//   - a CRITICAL finding in any file, text or lossily decoded bytes — one
+//     stray 0xFF must not turn agents/x.md or a Makefile into a "binary";
+//   - an undecodable script-like file (mode 100755, `#!`, script extension)
+//     that cannot be decoded for scanning at all;
+//   - a native executable (ELF, Mach-O, PE, .node/.so/.dylib/.dll/.exe),
+//     which no static scan can vouch for.
+// Lower severities are reported, not blocking: skill tooling scripts
+// legitimately spawn processes and clean temp folders. Other binaries
+// (fonts, audio, images) pass through.
+// ---------------------------------------------------------------------------
+import { fetchGitHubSkillBundle, SkillBundleError, } from "../discovery/github-skill-bundle.js";
+import { runTier1Scan } from "../scanner/index.js";
+import { dim, red, yellow } from "../utils/output.js";
+const SCRIPT_EXTENSIONS = /\.(sh|bash|zsh|fish|ksh|py|pyw|rb|pl|php|js|mjs|cjs|ts|mts|cts|ps1|psm1|bat|cmd|vbs|lua|tcl|applescript|command)$/i;
+const NATIVE_EXTENSIONS = /\.(node|so|dylib|dll|exe)$/i;
+/** ELF, Mach-O (thin + fat) or PE/COFF header. */
+export function isNativeExecutable(path, bytes) {
+    if (NATIVE_EXTENSIONS.test(path))
+        return true;
+    if (bytes.byteLength < 4)
+        return false;
+    const [a, b, c, d] = bytes;
+    if (a === 0x7f && b === 0x45 && c === 0x4c && d === 0x46)
+        return true; // \x7fELF
+    const be = ((a << 24) | (b << 16) | (c << 8) | d) >>> 0;
+    if ([0xfeedface, 0xfeedfacf, 0xcefaedfe, 0xcffaedfe, 0xcafebabe, 0xbebafeca].includes(be))
+        return true;
+    if (a === 0x4d && b === 0x5a && bytes.byteLength >= 64)
+        return true; // MZ
+    return false;
+}
+function looksLikeScript(path, bytes, executable) {
+    return executable || (bytes[0] === 0x23 && bytes[1] === 0x21) || SCRIPT_EXTENSIONS.test(path);
+}
+function criticalOf(text) {
+    return runTier1Scan(text).findings
+        .filter((f) => f.severity === "critical")
+        .map((f) => `${f.patternId} ${f.patternName} (line ${f.lineNumber})`);
+}
+function hasFindings(text) {
+    return runTier1Scan(text).findings.some((f) => f.severity !== "info");
+}
+export function scanSkillBundle(files, executables = []) {
+    const report = { critical: [], flagged: [] };
+    const exec = new Set(executables);
+    for (const [path, content] of Object.entries(files).sort(([a], [b]) => a.localeCompare(b))) {
+        if (typeof content === "string") {
+            const crit = criticalOf(content);
+            if (crit.length > 0)
+                report.critical.push({ path, findings: crit });
+            else if (hasFindings(content))
+                report.flagged.push(path);
+            continue;
+        }
+        if (isNativeExecutable(path, content)) {
+            report.critical.push({ path, findings: ["native executable: cannot be scanned"] });
+            continue;
+        }
+        const scriptLike = looksLikeScript(path, content, exec.has(path));
+        let text;
+        try {
+            // Lossy: invalid sequences become U+FFFD, NULs are dropped so they
+            // cannot split a pattern such as `cu\0rl | bash`.
+            text = new TextDecoder("utf-8").decode(content).replace(/\0/g, "");
+        }
+        catch {
+            if (scriptLike)
+                report.critical.push({ path, findings: ["script that cannot be scanned"] });
+            continue;
+        }
+        const crit = criticalOf(text);
+        if (crit.length > 0)
+            report.critical.push({ path, findings: crit });
+        else if (scriptLike && hasFindings(text))
+            report.flagged.push(path);
+    }
+    return report;
+}
+/**
+ * Download the skill folder and scan it. A failed download, a case
+ * collision or a blocking finding comes back as `ok: false`; an unlistable
+ * or over-limit folder comes back degraded with a warning printed.
+ */
+export async function prepareGitHubSkillBundle(args) {
+    let bundle;
+    try {
+        bundle = await fetchGitHubSkillBundle(args);
+    }
+    catch (err) {
+        const message = err instanceof SkillBundleError
+            ? err.message
+            : `Could not fetch the skill folder: ${err instanceof Error ? err.message : String(err)}`;
+        return { ok: false, verdict: "BUNDLE_ERROR", message };
+    }
+    if (bundle.degraded) {
+        console.log(yellow(`  WARNING: could not install the complete skill folder (${bundle.degraded}).\n` +
+            `  Installed SKILL.md and up to 100 files from its standard folders; the skill may be incomplete.`));
+    }
+    const binaries = Object.values(bundle.files).filter((v) => typeof v !== "string").length;
+    console.log(dim(`  Skill folder: ${bundle.fileList.length} file${bundle.fileList.length === 1 ? "" : "s"}` +
+        (binaries > 0 ? ` (${binaries} binary)` : "") +
+        (bundle.executables.length > 0 ? `, ${bundle.executables.length} executable` : "")));
+    for (const s of bundle.skipped) {
+        console.log(yellow(`  Not installed: ${s.path} (${s.reason})`));
+    }
+    const scan = scanSkillBundle(bundle.files, bundle.executables);
+    if (scan.flagged.length > 0) {
+        const list = scan.flagged.slice(0, 5).join(", ") + (scan.flagged.length > 5 ? ", ..." : "");
+        console.log(dim(`  Non-blocking scan findings in ${scan.flagged.length} bundled file(s): ${list}`));
+    }
+    if (scan.critical.length > 0) {
+        const lines = scan.critical
+            .slice(0, 10)
+            .map((c) => `    ${c.path}: ${c.findings.slice(0, 3).join("; ")}`)
+            .join("\n");
+        if (!args.force) {
+            return {
+                ok: false,
+                verdict: "FAIL",
+                message: `Blocking findings in ${scan.critical.length} bundled file(s):\n${lines}\n  Use --force to install anyway (not recommended).`,
+            };
+        }
+        console.log(red(`  --force: installing despite blocking findings in bundled files:\n${lines}`));
+    }
+    return { ok: true, bundle };
+}
+//# sourceMappingURL=add-github-bundle.js.map

package/dist/commands/add-github-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-github-bundle.js","sourceRoot":"","sources":["../../src/commands/add-github-bundle.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iFAAiF;AACjF,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,oEAAoE;AACpE,EAAE;AACF,6BAA6B;AAC7B,0EAA0E;AAC1E,0EAA0E;AAC1E,4EAA4E;AAC5E,kDAAkD;AAClD,yEAAyE;AACzE,0CAA0C;AAC1C,qEAAqE;AACrE,sEAAsE;AACtE,uCAAuC;AACvC,8EAA8E;AAE9E,OAAO,EACL,sBAAsB,EACtB,gBAAgB,GAGjB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAStD,MAAM,iBAAiB,GAAG,oHAAoH,CAAC;AAC/I,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAExD,kDAAkD;AAClD,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAiB;IAChE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IACjF,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,KAAK;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAiB,EAAE,UAAmB;IAC3E,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,UAAU,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAiC,EACjC,cAAiC,EAAE;IAEnC,MAAM,MAAM,GAAqB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC/D,IAAI,WAAW,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,mEAAmE;YACnE,kDAAkD;YAClD,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,UAAU;gBAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;aAC/D,IAAI,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAgD;IAEhD,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,gBAAgB;YAC7C,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CACT,MAAM,CACJ,2DAA2D,MAAM,CAAC,QAAQ,MAAM;YAC9E,kGAAkG,CACrG,CACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACzF,OAAO,CAAC,GAAG,CACT,GAAG,CACD,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QACxF,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CACrF,CACF,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,OAAO,CAAC,MAAM,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;aACxB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;aACjE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,wBAAwB,IAAI,CAAC,QAAQ,CAAC,MAAM,sBAAsB,KAAK,sDAAsD;aACvI,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,sEAAsE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}

package/dist/commands/add-lockfile.d.ts

@@ -27,5 +27,7 @@ export interface BuildGitHubInstallLockEntryArgs {
     global: boolean;
     /** ISO timestamp; injected for deterministic tests, defaults to `now`. */
     installedAt?: string;
+    /** 0894: every installed file relative to the skill folder (defaults to SKILL.md). */
+    files?: string[];
 }
 export declare function buildGitHubInstallLockEntry(args: BuildGitHubInstallLockEntryArgs): SkillLockEntry;

package/dist/commands/add-lockfile.js

@@ -6,7 +6,7 @@ export function buildGitHubInstallLockEntry(args) {
         installedAt: args.installedAt ?? new Date().toISOString(),
         source: `github:${args.owner}/${args.repo}`,
         scope: args.global ? "user" : "project",
-        files: ["SKILL.md"],
+        files: args.files && args.files.length > 0 ? [...args.files] : ["SKILL.md"],
         sourceType: "github",
         sourceRepoUrl: `https://github.com/${args.owner}/${args.repo}`,
     };

package/dist/commands/add-lockfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"add-lockfile.js","sourceRoot":"","sources":["../../src/commands/add-lockfile.ts"],"names":[],"mappings":"AAyCA,MAAM,UAAU,2BAA2B,CACzC,IAAqC;IAErC,MAAM,KAAK,GAAmB;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACzD,MAAM,EAAE,UAAU,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;QAC3C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACvC,KAAK,EAAE,CAAC,UAAU,CAAC;QACnB,UAAU,EAAE,QAAQ;QACpB,aAAa,EAAE,sBAAsB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;KAC/D,CAAC;IACF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"add-lockfile.js","sourceRoot":"","sources":["../../src/commands/add-lockfile.ts"],"names":[],"mappings":"AA2CA,MAAM,UAAU,2BAA2B,CACzC,IAAqC;IAErC,MAAM,KAAK,GAAmB;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACzD,MAAM,EAAE,UAAU,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;QAC3C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACvC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAC3E,UAAU,EAAE,QAAQ;QACpB,aAAa,EAAE,sBAAsB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;KAC/D,CAAC;IACF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commands/add.d.ts

@@ -1,11 +1,4 @@
 import type { AgentDefinition } from "../agents/agents-registry.js";
-/**
- * Subdirectories fetched alongside SKILL.md when installing a skill that lives
- * in a repo subdirectory. Must stay a subset of the prefixes the installer
- * accepts in installer/bundle-files.ts, or the write is rejected.
- */
-export declare const BUNDLE_SUBDIRS: readonly ["agents", "references", "scripts", "assets", "tests"];
-export declare function isBundleTextFile(name: string): boolean;
 interface MarketplaceDetectionResult {
     isMarketplace: boolean;
     manifestContent?: string;
@@ -80,4 +73,9 @@ export declare function enableAfterInstall(skillName: string, entry: {
  * @internal exported for unit tests; see `enableAfterInstall` note above.
  */
 export declare function rollbackInstall(skillName: string, agents: AgentDefinition[], opts: AddOptions): void;
+/**
+ * Collect all file contents from a plugin directory for security scanning.
+ * Concatenates content from all readable files.
+ */
+export declare function collectPluginContent(pluginDir: string): string;
 export declare function addCommand(source: string | undefined, opts: AddOptions): Promise<void>;