Skip to content

Comments

feat: external skill management with install, remove, verify, and trust CLI#684

Merged
bug-ops merged 4 commits intomainfrom
feature/683-skill-management
Feb 20, 2026
Merged

feat: external skill management with install, remove, verify, and trust CLI#684
bug-ops merged 4 commits intomainfrom
feature/683-skill-management

Conversation

@bug-ops
Copy link
Owner

@bug-ops bug-ops commented Feb 20, 2026

Summary

  • Add SkillManager in zeph-skills for installing skills from git URLs or local paths, removing, verifying blake3 integrity, and listing with trust metadata
  • Add CLI subcommands: zeph skill {install, remove, list, verify, trust, block, unblock} — runs without agent loop
  • Add in-session /skill install <url|path> and /skill remove <name> with hot reload
  • Introduce managed skills directory at ~/.config/zeph/skills/, auto-appended to skills.paths
  • Hash re-verification required before trust promotion to trusted/verified
  • URL scheme allowlist and path traversal validation as defense-in-depth
  • Blocking I/O wrapped in spawn_blocking for async safety

Test plan

  • cargo +nightly fmt --check passes
  • cargo clippy --workspace -- -D warnings passes (0 warnings)
  • cargo nextest run --workspace --lib --bins passes (2169 tests, 0 failures)
  • Manual: zeph skill install <local-path> installs and registers with Quarantined trust
  • Manual: zeph skill list shows installed skills with trust info
  • Manual: zeph skill remove <name> deletes skill and trust record
  • Manual: zeph skill verify <name> recomputes and compares blake3 hash

Closes #683

…st CLI

Add SkillManager for installing skills from git URLs or local paths,
removing installed skills, verifying blake3 integrity, and listing
with trust metadata. Includes CLI subcommands (zeph skill install/
remove/list/verify/trust/block/unblock), in-session /skill install
and /skill remove with hot reload, managed skills directory at
~/.config/zeph/skills/, and hash verification on trust promotion.

Closes #683
@github-actions github-actions bot added skills SKILL.md system rust core enhancement New feature or request size/XL labels Feb 20, 2026
@github-actions github-actions bot added the documentation Improvements or additions to documentation label Feb 20, 2026
Add 21 tests covering URL validation, path traversal rejection,
missing SKILL.md handling, in-session command dispatch, builder
integration, and bootstrap managed dir logic.
@bug-ops bug-ops enabled auto-merge (squash) February 20, 2026 23:23
@bug-ops bug-ops merged commit 8bcfe3c into main Feb 20, 2026
22 checks passed
@bug-ops bug-ops deleted the feature/683-skill-management branch February 20, 2026 23:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

core documentation Improvements or additions to documentation enhancement New feature or request rust size/XL skills SKILL.md system

Projects

None yet

Development

Successfully merging this pull request may close these issues.

External skill management: install, list, trust, remove with hot reload

1 participant