feat(skills): add registry doctor diagnostics and docs
This commit is contained in:
@@ -95,11 +95,11 @@ Tests:
|
||||
|
||||
Checklist:
|
||||
|
||||
- [ ] Update `README.md` skills section with registry usage.
|
||||
- [ ] Update `docs/security/SAFE_PERSONAL_AGENT.md` with registry trust model.
|
||||
- [ ] Add doctor diagnostics:
|
||||
- [ ] registry source reachable/parsible
|
||||
- [ ] clear warning when registry disabled/unconfigured
|
||||
- [x] Update `README.md` skills section with registry usage.
|
||||
- [x] Update `docs/security/SAFE_PERSONAL_AGENT.md` with registry trust model.
|
||||
- [x] Add doctor diagnostics:
|
||||
- [x] registry source reachable/parsible
|
||||
- [x] clear warning when registry disabled/unconfigured
|
||||
|
||||
Acceptance:
|
||||
|
||||
@@ -107,17 +107,17 @@ Acceptance:
|
||||
|
||||
Tests:
|
||||
|
||||
- [ ] Doctor tests for registry health reporting.
|
||||
- [x] Doctor tests for registry health reporting.
|
||||
|
||||
## Security Guardrails
|
||||
|
||||
- [ ] Registry metadata is never treated as trusted code.
|
||||
- [ ] Skill scanner remains mandatory before skill becomes available.
|
||||
- [ ] Prompt injection and symlink/binary checks still gate registry-installed skills.
|
||||
- [ ] Secrets are never accepted from registry metadata.
|
||||
- [x] Registry metadata is never treated as trusted code.
|
||||
- [x] Skill scanner remains mandatory before skill becomes available.
|
||||
- [x] Prompt injection and symlink/binary checks still gate registry-installed skills.
|
||||
- [x] Secrets are never accepted from registry metadata.
|
||||
|
||||
## Final Validation
|
||||
|
||||
- [ ] `pnpm typecheck`
|
||||
- [x] `pnpm typecheck`
|
||||
- [ ] `pnpm test:run`
|
||||
- [ ] Update `docs/plans/state.json` to `completed` with summary + test status once all phases land.
|
||||
|
||||
Reference in New Issue
Block a user