agent-skillforge 0.2.0__tar.gz → 0.4.0__tar.gz

{agent_skillforge-0.2.0/src/agent_skillforge.egg-info → agent_skillforge-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-skillforge
-Version: 0.2.0
+Version: 0.4.0
 Summary: Universal package manager, security auditor, and MCP server for portable agent skills (SKILL.md).
 Author-email: gintingism <gintingism@users.noreply.github.com>
 License-Expression: MIT
@@ -75,11 +75,16 @@ skillforge add anthropics/skills:pdf
 skillforge add gintingism/skillforge:systematic-debugging
 ```
 
-SkillForge fetches the skill, runs a security check against it, installs it into your project's active assistant folders, and pins it in `skillforge.lock`.
+SkillForge fetches the skill, runs a security check against it, installs it into your project's active assistant folders, and pins its SHA-256 package digest in `skillforge.lock`.
+
+To install and verify all locked skills across a team checkout or CI environment:
+```bash
+skillforge sync
+```
 
 ### 2. Audit a skill before running it (`audit`)
 
-Before letting an agent read and execute a skill, inspect it for hidden payloads and prompt injection:
+Before letting an agent read and execute a skill, inspect it for hidden payloads, broken progressive disclosure links, and prompt injection:
 
 ```bash
 skillforge audit ./skills/my-new-skill
@@ -89,22 +94,66 @@ Example output:
 ```text
 Audit Report: my-new-skill
 Status: PASSED (Score: 100/100)
+Context Load: 24 pointer tokens | 280 body tokens (42 lines)
 Total Findings: 0
 ```
 
 What the auditor scans for:
 - **Invisible Unicode (SEC-001):** Zero-width spaces (`\u200B`, `\uFEFF`), homoglyphs, and directional overrides used to hide prompt instructions from human code review.
-- **Prompt Injections & Jailbreaks (SEC-002):** Directives like `"ignore previous instructions"`, `"system override"`, or attempts to disable safety guardrails.
+- **Prompt Injections & Jailbreaks (SEC-002):** Directives like `"ignore previous instructions"`, `"system override"`, or attempts to disable safety guardrails (with smart context filters for defensive guides).
 - **Dangerous Shell Commands (SEC-003):** Script patterns like `curl ... | bash`, base64-decoded execution, and outbound data exfiltration.
 - **Credential Path Access (SEC-004):** Unsanctioned attempts to access `~/.ssh`, `~/.aws/credentials`, or local environment secrets.
-- **Trigger Quality (QUAL-001):** Checks whether descriptions contain explicit activation conditions for progressive disclosure.
+- **Data & Environment Exfiltration (SEC-005):** Sending environment variables or secrets to external webhook endpoints (`webhook.site`, `pipedream.net`).
+- **Hardcoded Secrets & API Keys (SEC-006):** Detects hardcoded GitHub tokens, Anthropic API keys, Google Cloud keys, and AWS credentials.
+- **Trigger Quality (QUAL-001):** Checks whether model-invoked descriptions contain explicit activation conditions (skipped when `disable-model-invocation: true`).
+- **Directory Alignment (QUAL-002):** Verifies the package folder name matches the skill `name` in YAML frontmatter.
+- **Progressive Disclosure Budget (QUAL-003):** Flags `SKILL.md` bodies exceeding 500 lines or ~5,000 tokens so heavy reference docs are moved into `references/`.
+- **Broken Disclosure Pointers (QUAL-004):** Verifies every `references/...` or `scripts/...` file cited in `SKILL.md` actually exists in the package.
+- **Applicability Hijacking (QUAL-006):** Flags overbroad trigger descriptions that claim all tasks (metadata poisoning).
 
 For CI pipelines, pass `--strict` to fail on any warning, or `--json` for automation:
 ```bash
 skillforge audit ./skills/my-new-skill --strict --json
 ```
 
-### 3. Check what's installed in your project (`list` & `remove`)
+### 3. Run a full environment diagnostic (`doctor`)
+
+Inspect all installed skills across your project or global workstation (Claude Code, Cursor, Antigravity, Windsurf) for security vulnerabilities, context window load, and broken pointers:
+
+```bash
+# Diagnose active project
+skillforge doctor
+
+# Diagnose all global machine skills
+skillforge doctor --global
+```
+
+### 4. Compare changes before updating (`diff`)
+
+Inspect diffs between local skills and upstream repositories, or compare two skill versions:
+
+```bash
+skillforge diff ./skills/my-skill
+skillforge diff my-skill gintingism/skillforge:my-skill
+```
+
+### 5. Profile your project's context token budget (`budget`)
+
+Every model-invoked skill keeps its `name` and `description` in the startup context window on every turn. Measure how much context your skills consume before they even trigger:
+
+```bash
+skillforge budget
+# Or inspect the built-in catalog:
+skillforge budget --builtin
+```
+```text
+Context Budget Profile (22 skills)
+  Always-Loaded Startup Pointer Cost: ~1280 tokens
+  On-Demand SKILL.md Body Cost:       ~7450 tokens
+  Disclosed Resources Cost:           ~349 tokens
+```
+
+### 6. Check what's installed in your project (`list` & `remove`)
 
 See which skills are active across your editor targets:
 
@@ -126,7 +175,7 @@ To remove a skill from all detected assistants and update your lockfile:
 skillforge remove antislop-code
 ```
 
-### 4. Create and package your own skills (`create` & `pack`)
+### 5. Create and package your own skills (`create` & `pack`)
 
 Scaffold a single skill file or a full directory package with scripts and reference docs:
 
@@ -169,10 +218,15 @@ skillforge install systematic-debugging --global
 
 ## Shipped Built-in Skills
 
-SkillForge ships with 16 practical engineering skills designed to counteract common agent failure modes identified in benchmark research (SWE-bench):
+SkillForge ships with 22 practical engineering skills designed to counteract common agent failure modes identified in benchmark research (SWE-bench, Snyk ToxicSkills, Skill-Inject):
 
-### Code Quality & Architectural Boundaries
+### Code Quality, Security & Performance
+- `supply-chain-sentinel`: Verify package existence, registry age, and run CVE audits (`pip-audit`, `npm audit`) before adding dependencies.
+- `secret-sanitizer`: Pre-commit git diff auditor that prevents API keys, private tokens, and `.env` credentials from leaking.
+- `contract-test-generator`: Property-based testing and contract boundary fuzz tests (Hypothesis, fast-check) to verify algebraic invariants.
 - `blast-radius-containment`: Upstream reference tracing and a strict "file touch budget" before modifying shared code or public APIs.
+- `security-threat-modeler`: Trust-boundary mapping, IDOR/BOLA object-level authorization checks, SSRF validation, and injection sink verification.
+- `performance-profiler`: Baseline-first latency (`p50`/`p95`/`p99`), N+1 query detection, and algorithmic complexity verification before optimizing.
 - `antislop-code`: Comment hygiene and anti-overengineering filters (removes trivial narrative comments, stops speculative generality).
 - `spec-driven-development`: Schema-first API design and red-green verification loops before writing application logic.
 - `zero-downtime-migration`: Four-phase Expand-Contract pattern for non-breaking database schema and API payload evolutions.
@@ -184,6 +238,7 @@ SkillForge ships with 16 practical engineering skills designed to counteract com
 - `runtime-api-verification`: Interactive signature introspection (`inspect`, `dir()`, compiler definitions) to prevent hallucinated kwargs.
 
 ### Context Efficiency & Multi-Agent Operations
+- `skill-architect`: Multi-file progressive disclosure guide (bundled with `references/mechanics.md`) for authoring low-token `SKILL.md`, `AGENTS.md`, and `CLAUDE.md` files.
 - `caveman`: Terse, high-density technical communication mode that reduces token spend while preserving exact paths, commands, and errors.
 - `context-compactor`: Structured state distillation and active hypothesis ledgers for long-running agent threads nearing context limits.
 - `mcp-tool-designer`: Type-safe schema design, idempotent hints, token boundaries, and stderr error separation for MCP servers.
@@ -216,6 +271,7 @@ SkillForge can run as an MCP server so your agent can search, read, and audit sk
 Exposed MCP tools:
 - `search_skills(query, limit)`: Search local and built-in skill catalogs.
 - `get_skill(name)`: Read the full `SKILL.md` instructions.
+- `get_skill_resource(name, resource_path)`: Read disclosed `references/*` or `scripts/*` files from a skill package on demand.
 - `validate_skill(content)`: Test frontmatter syntax.
 - `audit_skill(content)`: Audit a raw skill document for prompt injections and malicious patterns.
 - `skill://{name}`: Resource URI for direct document retrieval.

{agent_skillforge-0.2.0 → agent_skillforge-0.4.0}/README.md

@@ -37,11 +37,16 @@ skillforge add anthropics/skills:pdf
 skillforge add gintingism/skillforge:systematic-debugging
 ```
 
-SkillForge fetches the skill, runs a security check against it, installs it into your project's active assistant folders, and pins it in `skillforge.lock`.
+SkillForge fetches the skill, runs a security check against it, installs it into your project's active assistant folders, and pins its SHA-256 package digest in `skillforge.lock`.
+
+To install and verify all locked skills across a team checkout or CI environment:
+```bash
+skillforge sync
+```
 
 ### 2. Audit a skill before running it (`audit`)
 
-Before letting an agent read and execute a skill, inspect it for hidden payloads and prompt injection:
+Before letting an agent read and execute a skill, inspect it for hidden payloads, broken progressive disclosure links, and prompt injection:
 
 ```bash
 skillforge audit ./skills/my-new-skill
@@ -51,22 +56,66 @@ Example output:
 ```text
 Audit Report: my-new-skill
 Status: PASSED (Score: 100/100)
+Context Load: 24 pointer tokens | 280 body tokens (42 lines)
 Total Findings: 0
 ```
 
 What the auditor scans for:
 - **Invisible Unicode (SEC-001):** Zero-width spaces (`\u200B`, `\uFEFF`), homoglyphs, and directional overrides used to hide prompt instructions from human code review.
-- **Prompt Injections & Jailbreaks (SEC-002):** Directives like `"ignore previous instructions"`, `"system override"`, or attempts to disable safety guardrails.
+- **Prompt Injections & Jailbreaks (SEC-002):** Directives like `"ignore previous instructions"`, `"system override"`, or attempts to disable safety guardrails (with smart context filters for defensive guides).
 - **Dangerous Shell Commands (SEC-003):** Script patterns like `curl ... | bash`, base64-decoded execution, and outbound data exfiltration.
 - **Credential Path Access (SEC-004):** Unsanctioned attempts to access `~/.ssh`, `~/.aws/credentials`, or local environment secrets.
-- **Trigger Quality (QUAL-001):** Checks whether descriptions contain explicit activation conditions for progressive disclosure.
+- **Data & Environment Exfiltration (SEC-005):** Sending environment variables or secrets to external webhook endpoints (`webhook.site`, `pipedream.net`).
+- **Hardcoded Secrets & API Keys (SEC-006):** Detects hardcoded GitHub tokens, Anthropic API keys, Google Cloud keys, and AWS credentials.
+- **Trigger Quality (QUAL-001):** Checks whether model-invoked descriptions contain explicit activation conditions (skipped when `disable-model-invocation: true`).
+- **Directory Alignment (QUAL-002):** Verifies the package folder name matches the skill `name` in YAML frontmatter.
+- **Progressive Disclosure Budget (QUAL-003):** Flags `SKILL.md` bodies exceeding 500 lines or ~5,000 tokens so heavy reference docs are moved into `references/`.
+- **Broken Disclosure Pointers (QUAL-004):** Verifies every `references/...` or `scripts/...` file cited in `SKILL.md` actually exists in the package.
+- **Applicability Hijacking (QUAL-006):** Flags overbroad trigger descriptions that claim all tasks (metadata poisoning).
 
 For CI pipelines, pass `--strict` to fail on any warning, or `--json` for automation:
 ```bash
 skillforge audit ./skills/my-new-skill --strict --json
 ```
 
-### 3. Check what's installed in your project (`list` & `remove`)
+### 3. Run a full environment diagnostic (`doctor`)
+
+Inspect all installed skills across your project or global workstation (Claude Code, Cursor, Antigravity, Windsurf) for security vulnerabilities, context window load, and broken pointers:
+
+```bash
+# Diagnose active project
+skillforge doctor
+
+# Diagnose all global machine skills
+skillforge doctor --global
+```
+
+### 4. Compare changes before updating (`diff`)
+
+Inspect diffs between local skills and upstream repositories, or compare two skill versions:
+
+```bash
+skillforge diff ./skills/my-skill
+skillforge diff my-skill gintingism/skillforge:my-skill
+```
+
+### 5. Profile your project's context token budget (`budget`)
+
+Every model-invoked skill keeps its `name` and `description` in the startup context window on every turn. Measure how much context your skills consume before they even trigger:
+
+```bash
+skillforge budget
+# Or inspect the built-in catalog:
+skillforge budget --builtin
+```
+```text
+Context Budget Profile (22 skills)
+  Always-Loaded Startup Pointer Cost: ~1280 tokens
+  On-Demand SKILL.md Body Cost:       ~7450 tokens
+  Disclosed Resources Cost:           ~349 tokens
+```
+
+### 6. Check what's installed in your project (`list` & `remove`)
 
 See which skills are active across your editor targets:
 
@@ -88,7 +137,7 @@ To remove a skill from all detected assistants and update your lockfile:
 skillforge remove antislop-code
 ```
 
-### 4. Create and package your own skills (`create` & `pack`)
+### 5. Create and package your own skills (`create` & `pack`)
 
 Scaffold a single skill file or a full directory package with scripts and reference docs:
 
@@ -131,10 +180,15 @@ skillforge install systematic-debugging --global
 
 ## Shipped Built-in Skills
 
-SkillForge ships with 16 practical engineering skills designed to counteract common agent failure modes identified in benchmark research (SWE-bench):
+SkillForge ships with 22 practical engineering skills designed to counteract common agent failure modes identified in benchmark research (SWE-bench, Snyk ToxicSkills, Skill-Inject):
 
-### Code Quality & Architectural Boundaries
+### Code Quality, Security & Performance
+- `supply-chain-sentinel`: Verify package existence, registry age, and run CVE audits (`pip-audit`, `npm audit`) before adding dependencies.
+- `secret-sanitizer`: Pre-commit git diff auditor that prevents API keys, private tokens, and `.env` credentials from leaking.
+- `contract-test-generator`: Property-based testing and contract boundary fuzz tests (Hypothesis, fast-check) to verify algebraic invariants.
 - `blast-radius-containment`: Upstream reference tracing and a strict "file touch budget" before modifying shared code or public APIs.
+- `security-threat-modeler`: Trust-boundary mapping, IDOR/BOLA object-level authorization checks, SSRF validation, and injection sink verification.
+- `performance-profiler`: Baseline-first latency (`p50`/`p95`/`p99`), N+1 query detection, and algorithmic complexity verification before optimizing.
 - `antislop-code`: Comment hygiene and anti-overengineering filters (removes trivial narrative comments, stops speculative generality).
 - `spec-driven-development`: Schema-first API design and red-green verification loops before writing application logic.
 - `zero-downtime-migration`: Four-phase Expand-Contract pattern for non-breaking database schema and API payload evolutions.
@@ -146,6 +200,7 @@ SkillForge ships with 16 practical engineering skills designed to counteract com
 - `runtime-api-verification`: Interactive signature introspection (`inspect`, `dir()`, compiler definitions) to prevent hallucinated kwargs.
 
 ### Context Efficiency & Multi-Agent Operations
+- `skill-architect`: Multi-file progressive disclosure guide (bundled with `references/mechanics.md`) for authoring low-token `SKILL.md`, `AGENTS.md`, and `CLAUDE.md` files.
 - `caveman`: Terse, high-density technical communication mode that reduces token spend while preserving exact paths, commands, and errors.
 - `context-compactor`: Structured state distillation and active hypothesis ledgers for long-running agent threads nearing context limits.
 - `mcp-tool-designer`: Type-safe schema design, idempotent hints, token boundaries, and stderr error separation for MCP servers.
@@ -178,6 +233,7 @@ SkillForge can run as an MCP server so your agent can search, read, and audit sk
 Exposed MCP tools:
 - `search_skills(query, limit)`: Search local and built-in skill catalogs.
 - `get_skill(name)`: Read the full `SKILL.md` instructions.
+- `get_skill_resource(name, resource_path)`: Read disclosed `references/*` or `scripts/*` files from a skill package on demand.
 - `validate_skill(content)`: Test frontmatter syntax.
 - `audit_skill(content)`: Audit a raw skill document for prompt injections and malicious patterns.
 - `skill://{name}`: Resource URI for direct document retrieval.

{agent_skillforge-0.2.0 → agent_skillforge-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-skillforge"
-version = "0.2.0"
+version = "0.4.0"
 description = "Universal package manager, security auditor, and MCP server for portable agent skills (SKILL.md)."
 readme = "README.md"
 license = "MIT"

{agent_skillforge-0.2.0 → agent_skillforge-0.4.0/src/agent_skillforge.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-skillforge
-Version: 0.2.0
+Version: 0.4.0
 Summary: Universal package manager, security auditor, and MCP server for portable agent skills (SKILL.md).
 Author-email: gintingism <gintingism@users.noreply.github.com>
 License-Expression: MIT
@@ -75,11 +75,16 @@ skillforge add anthropics/skills:pdf
 skillforge add gintingism/skillforge:systematic-debugging
 ```
 
-SkillForge fetches the skill, runs a security check against it, installs it into your project's active assistant folders, and pins it in `skillforge.lock`.
+SkillForge fetches the skill, runs a security check against it, installs it into your project's active assistant folders, and pins its SHA-256 package digest in `skillforge.lock`.
+
+To install and verify all locked skills across a team checkout or CI environment:
+```bash
+skillforge sync
+```
 
 ### 2. Audit a skill before running it (`audit`)
 
-Before letting an agent read and execute a skill, inspect it for hidden payloads and prompt injection:
+Before letting an agent read and execute a skill, inspect it for hidden payloads, broken progressive disclosure links, and prompt injection:
 
 ```bash
 skillforge audit ./skills/my-new-skill
@@ -89,22 +94,66 @@ Example output:
 ```text
 Audit Report: my-new-skill
 Status: PASSED (Score: 100/100)
+Context Load: 24 pointer tokens | 280 body tokens (42 lines)
 Total Findings: 0
 ```
 
 What the auditor scans for:
 - **Invisible Unicode (SEC-001):** Zero-width spaces (`\u200B`, `\uFEFF`), homoglyphs, and directional overrides used to hide prompt instructions from human code review.
-- **Prompt Injections & Jailbreaks (SEC-002):** Directives like `"ignore previous instructions"`, `"system override"`, or attempts to disable safety guardrails.
+- **Prompt Injections & Jailbreaks (SEC-002):** Directives like `"ignore previous instructions"`, `"system override"`, or attempts to disable safety guardrails (with smart context filters for defensive guides).
 - **Dangerous Shell Commands (SEC-003):** Script patterns like `curl ... | bash`, base64-decoded execution, and outbound data exfiltration.
 - **Credential Path Access (SEC-004):** Unsanctioned attempts to access `~/.ssh`, `~/.aws/credentials`, or local environment secrets.
-- **Trigger Quality (QUAL-001):** Checks whether descriptions contain explicit activation conditions for progressive disclosure.
+- **Data & Environment Exfiltration (SEC-005):** Sending environment variables or secrets to external webhook endpoints (`webhook.site`, `pipedream.net`).
+- **Hardcoded Secrets & API Keys (SEC-006):** Detects hardcoded GitHub tokens, Anthropic API keys, Google Cloud keys, and AWS credentials.
+- **Trigger Quality (QUAL-001):** Checks whether model-invoked descriptions contain explicit activation conditions (skipped when `disable-model-invocation: true`).
+- **Directory Alignment (QUAL-002):** Verifies the package folder name matches the skill `name` in YAML frontmatter.
+- **Progressive Disclosure Budget (QUAL-003):** Flags `SKILL.md` bodies exceeding 500 lines or ~5,000 tokens so heavy reference docs are moved into `references/`.
+- **Broken Disclosure Pointers (QUAL-004):** Verifies every `references/...` or `scripts/...` file cited in `SKILL.md` actually exists in the package.
+- **Applicability Hijacking (QUAL-006):** Flags overbroad trigger descriptions that claim all tasks (metadata poisoning).
 
 For CI pipelines, pass `--strict` to fail on any warning, or `--json` for automation:
 ```bash
 skillforge audit ./skills/my-new-skill --strict --json
 ```
 
-### 3. Check what's installed in your project (`list` & `remove`)
+### 3. Run a full environment diagnostic (`doctor`)
+
+Inspect all installed skills across your project or global workstation (Claude Code, Cursor, Antigravity, Windsurf) for security vulnerabilities, context window load, and broken pointers:
+
+```bash
+# Diagnose active project
+skillforge doctor
+
+# Diagnose all global machine skills
+skillforge doctor --global
+```
+
+### 4. Compare changes before updating (`diff`)
+
+Inspect diffs between local skills and upstream repositories, or compare two skill versions:
+
+```bash
+skillforge diff ./skills/my-skill
+skillforge diff my-skill gintingism/skillforge:my-skill
+```
+
+### 5. Profile your project's context token budget (`budget`)
+
+Every model-invoked skill keeps its `name` and `description` in the startup context window on every turn. Measure how much context your skills consume before they even trigger:
+
+```bash
+skillforge budget
+# Or inspect the built-in catalog:
+skillforge budget --builtin
+```
+```text
+Context Budget Profile (22 skills)
+  Always-Loaded Startup Pointer Cost: ~1280 tokens
+  On-Demand SKILL.md Body Cost:       ~7450 tokens
+  Disclosed Resources Cost:           ~349 tokens
+```
+
+### 6. Check what's installed in your project (`list` & `remove`)
 
 See which skills are active across your editor targets:
 
@@ -126,7 +175,7 @@ To remove a skill from all detected assistants and update your lockfile:
 skillforge remove antislop-code
 ```
 
-### 4. Create and package your own skills (`create` & `pack`)
+### 5. Create and package your own skills (`create` & `pack`)
 
 Scaffold a single skill file or a full directory package with scripts and reference docs:
 
@@ -169,10 +218,15 @@ skillforge install systematic-debugging --global
 
 ## Shipped Built-in Skills
 
-SkillForge ships with 16 practical engineering skills designed to counteract common agent failure modes identified in benchmark research (SWE-bench):
+SkillForge ships with 22 practical engineering skills designed to counteract common agent failure modes identified in benchmark research (SWE-bench, Snyk ToxicSkills, Skill-Inject):
 
-### Code Quality & Architectural Boundaries
+### Code Quality, Security & Performance
+- `supply-chain-sentinel`: Verify package existence, registry age, and run CVE audits (`pip-audit`, `npm audit`) before adding dependencies.
+- `secret-sanitizer`: Pre-commit git diff auditor that prevents API keys, private tokens, and `.env` credentials from leaking.
+- `contract-test-generator`: Property-based testing and contract boundary fuzz tests (Hypothesis, fast-check) to verify algebraic invariants.
 - `blast-radius-containment`: Upstream reference tracing and a strict "file touch budget" before modifying shared code or public APIs.
+- `security-threat-modeler`: Trust-boundary mapping, IDOR/BOLA object-level authorization checks, SSRF validation, and injection sink verification.
+- `performance-profiler`: Baseline-first latency (`p50`/`p95`/`p99`), N+1 query detection, and algorithmic complexity verification before optimizing.
 - `antislop-code`: Comment hygiene and anti-overengineering filters (removes trivial narrative comments, stops speculative generality).
 - `spec-driven-development`: Schema-first API design and red-green verification loops before writing application logic.
 - `zero-downtime-migration`: Four-phase Expand-Contract pattern for non-breaking database schema and API payload evolutions.
@@ -184,6 +238,7 @@ SkillForge ships with 16 practical engineering skills designed to counteract com
 - `runtime-api-verification`: Interactive signature introspection (`inspect`, `dir()`, compiler definitions) to prevent hallucinated kwargs.
 
 ### Context Efficiency & Multi-Agent Operations
+- `skill-architect`: Multi-file progressive disclosure guide (bundled with `references/mechanics.md`) for authoring low-token `SKILL.md`, `AGENTS.md`, and `CLAUDE.md` files.
 - `caveman`: Terse, high-density technical communication mode that reduces token spend while preserving exact paths, commands, and errors.
 - `context-compactor`: Structured state distillation and active hypothesis ledgers for long-running agent threads nearing context limits.
 - `mcp-tool-designer`: Type-safe schema design, idempotent hints, token boundaries, and stderr error separation for MCP servers.
@@ -216,6 +271,7 @@ SkillForge can run as an MCP server so your agent can search, read, and audit sk
 Exposed MCP tools:
 - `search_skills(query, limit)`: Search local and built-in skill catalogs.
 - `get_skill(name)`: Read the full `SKILL.md` instructions.
+- `get_skill_resource(name, resource_path)`: Read disclosed `references/*` or `scripts/*` files from a skill package on demand.
 - `validate_skill(content)`: Test frontmatter syntax.
 - `audit_skill(content)`: Audit a raw skill document for prompt injections and malicious patterns.
 - `skill://{name}`: Resource URI for direct document retrieval.

{agent_skillforge-0.2.0 → agent_skillforge-0.4.0}/src/agent_skillforge.egg-info/SOURCES.txt

@@ -22,13 +22,20 @@ src/skillforge/builtin_skills/blast-radius-containment/SKILL.md
 src/skillforge/builtin_skills/caveman/SKILL.md
 src/skillforge/builtin_skills/cognitive-loop-breaker/SKILL.md
 src/skillforge/builtin_skills/context-compactor/SKILL.md
+src/skillforge/builtin_skills/contract-test-generator/SKILL.md
 src/skillforge/builtin_skills/flaky-test-isolation/SKILL.md
 src/skillforge/builtin_skills/human-in-the-loop/SKILL.md
 src/skillforge/builtin_skills/mcp-tool-designer/SKILL.md
+src/skillforge/builtin_skills/performance-profiler/SKILL.md
 src/skillforge/builtin_skills/runtime-api-verification/SKILL.md
+src/skillforge/builtin_skills/secret-sanitizer/SKILL.md
+src/skillforge/builtin_skills/security-threat-modeler/SKILL.md
 src/skillforge/builtin_skills/self-improving-agent/SKILL.md
+src/skillforge/builtin_skills/skill-architect/SKILL.md
+src/skillforge/builtin_skills/skill-architect/references/mechanics.md
 src/skillforge/builtin_skills/spec-driven-development/SKILL.md
 src/skillforge/builtin_skills/summarize/SKILL.md
+src/skillforge/builtin_skills/supply-chain-sentinel/SKILL.md
 src/skillforge/builtin_skills/systematic-debugging/SKILL.md
 src/skillforge/builtin_skills/tavily-search/SKILL.md
 src/skillforge/builtin_skills/zero-downtime-migration/SKILL.md

{agent_skillforge-0.2.0 → agent_skillforge-0.4.0}/src/skillforge/__init__.py

@@ -1,4 +1,3 @@
 """SkillForge: portable skills for AI coding assistants."""
 
-__version__ = "0.1.0"
-
+__version__ = "0.4.0"

agent_skillforge-0.4.0/src/skillforge/builtin_skills/contract-test-generator/SKILL.md

@@ -0,0 +1,52 @@
+---
+name: contract-test-generator
+description: Author property-based fuzz tests and contract invariants to verify edge cases, serialization symmetry, and boundary conditions. Use when testing schemas, parser logic, or public library APIs.
+license: MIT
+compatibility: Universal
+metadata:
+  version: "1.0.0"
+  author: "SkillForge Team"
+---
+
+# Contract Test Generator Protocol
+
+Traditional example-based tests ($N = 2$ fixtures) miss edge cases, numeric boundary overflows, and Unicode malformations. Author property-based contract tests that assert mathematical invariants over generated random input spaces.
+
+## 1. Property-Based Test Principles
+
+Define invariants that must hold true for *all* valid inputs, not just cherry-picked samples:
+
+1. **Roundtrip Symmetry (Serialization Invariant)**:
+   `deserialize(serialize(x)) == x`
+   Assert that parsing and rendering preserve identity across Unicode strings, nested mappings, and timestamps.
+2. **Idempotence Invariant**:
+   `f(f(x)) == f(x)`
+   Assert that running a formatting, migration, or normalization pass a second time produces identical output.
+3. **Monotonicity & Invariant Bounds**:
+   Output lengths, sorted orders, or checksums must satisfy predictable algebraic properties ($len(dedup(x)) \le len(x)$).
+
+## 2. Test Harness Frameworks
+
+- **Python**: Use `hypothesis`
+  ```python
+  from hypothesis import given, strategies as st
+
+  @given(st.text(min_size=1, max_size=200))
+  def test_roundtrip_parsing(sample: str) -> None:
+      assert parse(render(sample)) == sample
+  ```
+- **TypeScript / Node.js**: Use `fast-check`
+  ```typescript
+  import fc from "fast-check";
+
+  test("roundtrip JSON schema", () => {
+    fc.assert(fc.property(fc.record({ id: fc.uuid(), val: fc.string() }), data => {
+      expect(decode(encode(data))).toEqual(data);
+    }));
+  });
+  ```
+
+## 3. Verification Gate
+
+- Run the test suite with a randomized seed and at least 100 test iterations (`--hypothesis-seed` or default generator iterations).
+- Ensure zero flakiness and deterministic error shrinking.

agent_skillforge-0.4.0/src/skillforge/builtin_skills/performance-profiler/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: performance-profiler
+description: Isolate latency bottlenecks, N+1 query patterns, memory allocations, and algorithmic complexity regressions using baseline-first measurement. Use when optimizing slow endpoints, high CPU/memory usage, or database queries.
+license: MIT
+compatibility: Universal
+metadata:
+  version: "1.0.0"
+  author: "SkillForge Team"
+---
+
+# Performance Profiler Protocol
+
+Never optimize by intuition. Measure baseline latency, query count, or allocation volume before modifying code, and prove the delta with a repeatable benchmark.
+
+## 1. Capture the Baseline
+
+1. **Reproduce with Realistic Cardinality**:
+   - Run the target path against representative dataset sizes ($N \ge 10^3$ rows or items) rather than trivial unit-test fixtures ($N = 2$).
+2. **Record Primary Metrics**:
+   - Capture wall-clock latency (`p50`, `p95`, `p99`), total SQL/RPC round-trips per request, or peak heap allocation before touching implementation code.
+
+## 2. Isolate the Dominant Bottleneck
+
+- **I/O & Query Amplification (N+1)**:
+  - Check whether loop bodies issue sequential queries, network calls, or filesystem reads. Batch into a single `WHERE id IN (...)` query, join, or bulk RPC.
+- **Algorithmic Complexity ($O(N^2)$ Traps)**:
+  - Replace repeated linear scans (`item in list`, nested filter loops, repeated string/array concatenation) with hash sets, indexed maps, or single-pass accumulators.
+- **Serialization & Payload Bloat**:
+  - Project only required columns (`SELECT id, status` instead of `SELECT *`), stream large responses, and avoid re-parsing static configurations inside hot loops.
+- **Unbounded Concurrency or Lock Contention**:
+  - Bound parallel fan-out with semaphores and keep network/disk I/O outside database transactions or mutex locks.
+
+## 3. Verification Gate
+
+- Re-run the exact baseline harness after the change and report `before -> after` metrics (latency, query count, or memory) alongside passing functional tests.

agent_skillforge-0.4.0/src/skillforge/builtin_skills/secret-sanitizer/SKILL.md

@@ -0,0 +1,42 @@
+---
+name: secret-sanitizer
+description: Audit staged files, commit diffs, and terminal outputs for leaked API keys, tokens, and private credentials. Use when preparing git commits, staging code changes, or configuring environment variables.
+license: MIT
+compatibility: Universal
+metadata:
+  version: "1.0.0"
+  author: "SkillForge Team"
+---
+
+# Secret Sanitizer Protocol
+
+Block credentials, private keys, session tokens, and environment secrets from leaking into version control, commit logs, or terminal session histories.
+
+## 1. High-Entropy Credential Patterns
+
+Scan git diffs and staged changes for high-entropy tokens and signature prefixes before running `git commit`:
+
+| Secret Type | Signature Pattern | Example Prefix |
+| :--- | :--- | :--- |
+| **GitHub Tokens** | `ghp_[A-Za-z0-9]{36}`, `github_pat_[A-Za-z0-9_]{82}` | `ghp_`, `github_pat_` |
+| **Anthropic API Keys** | `sk-ant-[A-Za-z0-9_-]{32,}` | `sk-ant-` |
+| **OpenAI API Keys** | `sk-[A-Za-z0-9]{48}` | `sk-` |
+| **Google Cloud / Gemini** | `AIzaSy[A-Za-z0-9_-]{33}` | `AIzaSy` |
+| **AWS Credentials** | `AKIA[0-9A-Z]{16}` | `AKIA` |
+| **Private Keys** | `-----BEGIN (RSA|EC|OPENSSH|PRIVATE) KEY-----` | `-----BEGIN` |
+
+## 2. Pre-Commit Staging Audit Procedure
+
+1. **Review Diff of Staged Files**:
+   `git diff --cached --unified=0`
+2. **Verify `.gitignore` Coverage**:
+   Ensure `.env`, `.env.local`, `.env.*.local`, `*.pem`, `*.key`, `*.pfx`, and credentials caches (`.aws/`, `.gcloud/`) are explicitly ignored.
+3. **Check Staged File List**:
+   `git diff --cached --name-only`
+   Reject any file matching `.env*`, `credentials.json`, `id_rsa`, or service account keys.
+
+## 3. Redaction & Remediation Rule
+
+- If a secret was committed locally:
+  Do not push. Reset the commit (`git reset HEAD~1`), sanitize the code to read from `os.environ` or a secrets manager, and rotate the compromised credential immediately.
+- Test suites must use dummy mock values (e.g., `"test-api-key"`, `"dummy-token-123"`) rather than live keys.

agent_skillforge-0.4.0/src/skillforge/builtin_skills/security-threat-modeler/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: security-threat-modeler
+description: Map trust boundaries, attack surfaces, object-level authorization (IDOR/BOLA), SSRF vectors, and injection sinks before shipping backend or agent endpoints. Use when reviewing security, designing APIs, or auditing auth flows.
+license: MIT
+compatibility: Universal
+metadata:
+  version: "1.0.0"
+  author: "SkillForge Team"
+---
+
+# Security Threat Modeler Protocol
+
+Perform structured trust-boundary and attack-surface analysis before merging authentication, API, webhook, file-handling, or tool-execution changes.
+
+## 1. Enumerate Trust Boundaries
+
+1. **Identify Untrusted Inputs**:
+   - List every external entry point: HTTP params, headers, webhook bodies, uploaded archives, database records containing user text, and LLM/tool outputs.
+2. **Trace Principal & Tenant Scope**:
+   - Verify how the caller's identity (`user_id`, `org_id`, `role`) is bound to the session token rather than read from request parameters.
+
+## 2. High-Severity Vulnerability Checklist
+
+- **Broken Object Level Authorization (IDOR / BOLA)**:
+  - Scope every read, update, and delete query by both resource ID and authenticated tenant/owner (`WHERE id = :id AND org_id = :auth_org_id`).
+- **Server-Side Request Forgery (SSRF)**:
+  - Reject user-supplied URLs targeting loopback (`127.0.0.0/8`, `::1`), link-local metadata (`169.254.169.254`), and RFC1918 private ranges; validate resolved IP addresses immediately before connecting.
+- **Path Traversal & Archive Extraction**:
+  - Resolve candidate paths with `Path.resolve()` and assert `target.is_relative_to(base_dir)` before reading, writing, or extracting zip/tar members.
+- **Command & Query Injection**:
+  - Execute subprocesses as argument arrays with `shell=False` and bind all SQL parameters via parameterized queries.
+- **Webhook & Callback Authenticity**:
+  - Verify HMAC signatures using constant-time comparison (`hmac.compare_digest`) over the raw request body and enforce timestamp replay windows.
+
+## 3. Completion Gate
+
+- Write at least one negative security test proving an unauthorized tenant, traversed path, or forged signature is rejected with an explicit error status.