XiaoSeS
0ce9b8e35a
chore(skill): register skillhub cli builtin package
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 09:24:21 +08:00
XiaoSeS
fc30fd3729
test(skill): align registry marker assertion
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 09:24:21 +08:00
XiaoSeS
0ae50f30d7
feat(skill): add first-party SkillHub CLI guide
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 09:24:21 +08:00
XiaoSeS
a838078cd9
fix(web): separate skill and suite discovery
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-09 09:12:44 +08:00
XiaoSeS
717165bd69
fix(cli): preserve shared SkillHub state fields ( #835 )
...
Deploy Docs / build (push) Waiting to run
Deploy Docs / Deploy (push) Blocked by required conditions
Security / Dependency Review (push) Waiting to run
Security / CodeQL (java-kotlin) (push) Waiting to run
Security / CodeQL (javascript-typescript) (push) Waiting to run
Security / CodeQL (python) (push) Waiting to run
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 19:41:49 +08:00
XiaoSeS
859987e3bb
feat(suite): add first-class skill suites
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 19:30:57 +08:00
FenjuFu
77777d215f
feat(starter): add reviewed Zero Slop skill
...
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-08 16:14:24 +08:00
XiaoSeS
25e18e047c
Merge pull request #829 from iflytek/codex/feat/issue-819-hidden-skill-restore-20260908
...
fix(governance): restore hidden skill management
2026-09-08 14:35:22 +08:00
XiaoSeS
c9dca27cc2
Merge pull request #830 from iflytek/codex/fix/issue-827-secret-expression-regression-20260908
...
fix(validation): ignore credential expressions
2026-09-08 14:33:44 +08:00
XiaoSeS
a6aa073627
fix(validation): preserve wrapper expression boundaries
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 12:25:29 +08:00
XiaoSeS
52969c997c
fix(validation): classify bare secrets by file context
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 12:17:03 +08:00
XiaoSeS
8f9db2ada7
fix(validation): scan all sensitive assignments
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 12:03:56 +08:00
XiaoSeS
9d0431f7d3
fix(validation): preserve credential literal boundaries
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:45:48 +08:00
XiaoSeS
7c62aa218a
fix(validation): avoid regex stack overflow
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:34:51 +08:00
XiaoSeS
702a1cc34f
perf(governance): batch hidden skill summaries
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:32:20 +08:00
XiaoSeS
4efd6c6366
refactor(governance): page hidden skill queries
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:27:36 +08:00
XiaoSeS
927780db46
fix(governance): exclude hidden skills from owner list
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:19:06 +08:00
XiaoSeS
824a992afc
fix(validation): ignore credential expressions
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:17:22 +08:00
XiaoSeS
5c5634dd22
fix(governance): restore hidden skill management
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-08 11:15:04 +08:00
XiaoSeS
19cc56be9e
Merge pull request #826 from iflytek/feature/skill-suites-spec
...
docs(spec): define skill suite lifecycle and compatibility
2026-09-07 17:06:53 +08:00
XiaoSeS
accd0e1f67
docs(spec): define skill suite lifecycle and compatibility
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-07 16:52:26 +08:00
FenjuFu
f51f74c46e
chore(starter): normalize package files to LF
...
Preserve repository-standard line endings so the built-in Skill shell regression runs correctly on Linux.
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-06 20:26:51 +08:00
FenjuFu
cb5b614bff
feat(starter): add reviewed SandBase MCP skill
...
Add a provenance-pinned SandBase v0.1.17 package with cost, privacy, setup-approval, and charged-retry boundaries plus a realistic eval. Allow reviewed source packages to remain outside the runtime manifest until their immutable CDN artifact is published.
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-06 20:19:30 +08:00
XiaoSeS
53df1041f5
Merge pull request #818 from iflytek/docs/weekly-w36-official
...
Security / Dependency Review (push) Has been cancelled
Deploy Docs / build (push) Has been cancelled
Security / CodeQL (java-kotlin) (push) Has been cancelled
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Security / CodeQL (python) (push) Has been cancelled
Deploy Docs / Deploy (push) Has been cancelled
docs(weekly): publish 2026 W36 report
2026-09-04 22:32:00 +08:00
XiaoSeS
5960a6c3bf
docs(weekly): publish 2026 W36 report
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 22:28:12 +08:00
dongmucat
64e1fecbe7
Merge pull request #816 from iflytek/release/cli-v0.1.11
...
chore(cli): release 0.1.11
2026-09-04 18:06:20 +08:00
dongmucat
bb8abbb46e
chore(cli): bump version to 0.1.11
...
Signed-off-by: dongmucat <1127093059@qq.com>
2026-09-04 18:04:19 +08:00
XiaoSeS
5258b24462
Merge pull request #815 from iflytek/fix/cli-explicit-sync-submit-semantics
...
fix(cli): align publish and namespace sync semantics
2026-09-04 17:44:12 +08:00
XiaoSeS
ed925aca99
docs(cli): show repeatable sync skill syntax
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
3421ee7923
docs(cli): clarify sync pull selection option
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
a5a723d8f7
fix(cli): align publish and namespace sync semantics
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 16:42:58 +08:00
XiaoSeS
b9972af39f
Merge pull request #814 from iflytek/codex/issue-728-plugin-scanner-20260904
...
feat(builtin-skills): add HOL Guard plugin scanner
2026-09-04 16:32:29 +08:00
XiaoSeS
d73d4590ff
Merge pull request #813 from iflytek/fix/dependabot-security-alerts
...
chore(deps): patch open Dependabot alerts
2026-09-04 16:32:14 +08:00
XiaoSeS
3364869b6f
Merge pull request #812 from FenjuFu/fix/issue-810-spa-cache
...
fix(web): revalidate SPA entry point after upgrades
2026-09-04 16:31:53 +08:00
XiaoSeS
1ea1c0867f
test(builtin-skills): avoid manifest size coupling
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:56:00 +08:00
XiaoSeS
9761205e77
feat(builtin-skills): publish plugin scanner artifact
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:51:31 +08:00
XiaoSeS
bcef4fc5f0
test(builtin-skills): constrain runtime inventory
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:27:04 +08:00
XiaoSeS
7d9ea67169
test(builtin-skills): derive collection size from catalog
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:25:02 +08:00
XiaoSeS
d6345924d8
fix(builtin-skills): isolate scanner policy
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:23:07 +08:00
XiaoSeS
4f79bea9c2
fix(builtin-skills): preserve upstream license text
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:14:05 +08:00
XiaoSeS
6f4f294326
feat(builtin-skills): add plugin scanner
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 15:11:47 +08:00
dongmucat
dc043a208c
chore(deps): patch open Dependabot alerts
...
Signed-off-by: dongmucat <1127093059@qq.com>
2026-09-04 14:53:43 +08:00
XiaoSeS
63b220420d
Merge pull request #788 from FenjuFu/feat/install-for-agent
...
feat(skill): add install-for-agent prompt
2026-09-04 14:49:19 +08:00
XiaoSeS
a41ce7656c
fix(skill): simplify agent install prompt
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 14:29:29 +08:00
XiaoSeS
42a0e423f4
fix(skill): version exact-install guidance update
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 14:01:55 +08:00
XiaoSeS
1f2fe961c5
test(skill): cover exact-source install guidance
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 13:54:15 +08:00
XiaoSeS
857797f0cc
fix(skill): keep exact installs on selected registry
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 13:49:57 +08:00
XiaoSeS
5fea369d60
fix(web): preserve registry in agent onboarding
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 12:56:56 +08:00
XiaoSeS
400240b5d6
test(web): align install guidance expectations
...
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-04 12:34:09 +08:00
FenjuFu
3c9eda199c
fix(web): preserve LF endings in nginx assets
...
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
2026-09-04 11:56:16 +08:00