feat(skills): add registry doctor diagnostics and docs

This commit is contained in:
William Valentin
2026-02-16 00:53:25 -08:00
parent 23609a03a4
commit ae36248da8
11 changed files with 298 additions and 23 deletions
@@ -95,11 +95,11 @@ Tests:
Checklist:
- [ ] Update `README.md` skills section with registry usage.
- [ ] Update `docs/security/SAFE_PERSONAL_AGENT.md` with registry trust model.
- [ ] Add doctor diagnostics:
- [ ] registry source reachable/parsible
- [ ] clear warning when registry disabled/unconfigured
- [x] Update `README.md` skills section with registry usage.
- [x] Update `docs/security/SAFE_PERSONAL_AGENT.md` with registry trust model.
- [x] Add doctor diagnostics:
- [x] registry source reachable/parsible
- [x] clear warning when registry disabled/unconfigured
Acceptance:
@@ -107,17 +107,17 @@ Acceptance:
Tests:
- [ ] Doctor tests for registry health reporting.
- [x] Doctor tests for registry health reporting.
## Security Guardrails
- [ ] Registry metadata is never treated as trusted code.
- [ ] Skill scanner remains mandatory before skill becomes available.
- [ ] Prompt injection and symlink/binary checks still gate registry-installed skills.
- [ ] Secrets are never accepted from registry metadata.
- [x] Registry metadata is never treated as trusted code.
- [x] Skill scanner remains mandatory before skill becomes available.
- [x] Prompt injection and symlink/binary checks still gate registry-installed skills.
- [x] Secrets are never accepted from registry metadata.
## Final Validation
- [ ] `pnpm typecheck`
- [x] `pnpm typecheck`
- [ ] `pnpm test:run`
- [ ] Update `docs/plans/state.json` to `completed` with summary + test status once all phases land.