agent-skills

AIMIT

agent-skills release notes.

Latest 0.6.9 · by agent-skillsWritten in JavaScriptWebsiteaddyosmani/agent-skillsRSS

Release activity

Release activity — 11 releases across 11 days since Apr 10, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Apr 10, 2026. Older weeks are hidden at this screen width.
JunJulAugSep
SundayNo releases on May 24, 2026No releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 20261 release on Jul 12, 2026No releases on Jul 19, 20261 release on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026No releases on Aug 16, 2026No releases on Aug 23, 2026No releases on Aug 30, 2026No releases on Sep 6, 2026
MondayNo releases on May 25, 2026No releases on Jun 1, 2026No releases on Jun 8, 2026No releases on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026No releases on Aug 10, 2026No releases on Aug 17, 2026No releases on Aug 24, 2026No releases on Aug 31, 2026
TuesdayNo releases on May 26, 2026No releases on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 2026No releases on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 20261 release on Aug 4, 2026No releases on Aug 11, 2026No releases on Aug 18, 2026No releases on Aug 25, 2026No releases on Sep 1, 2026
WednesdayNo releases on May 27, 2026No releases on Jun 3, 2026No releases on Jun 10, 2026No releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026No releases on Aug 19, 2026No releases on Aug 26, 2026No releases on Sep 2, 2026
ThursdayNo releases on May 28, 2026No releases on Jun 4, 20261 release on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026No releases on Aug 13, 2026No releases on Aug 20, 2026No releases on Aug 27, 2026No releases on Sep 3, 2026
FridayNo releases on May 29, 2026No releases on Jun 5, 2026No releases on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 20261 release on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 20261 release on Aug 14, 2026No releases on Aug 21, 20261 release on Aug 28, 2026No releases on Sep 4, 2026
SaturdayNo releases on May 30, 2026No releases on Jun 6, 2026No releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026No releases on Aug 15, 2026No releases on Aug 22, 2026No releases on Aug 29, 20261 release on Sep 5, 2026

11 releases since Apr 10, 2026

Changelog

0.6.9

Latest
Added 6
  • Advanced per-agent configuration guide for keeping SKILL.md frontmatter portable and pushing vendor-specific runtime controls into metadata or per-agent adapters
  • Rejected skill-change ledger as an append-only record of proposed and rejected skill changes with eval scores to prevent re-litigation of the same ideas
  • Documentation distinguishing between the standalone Copilot CLI and Copilot inside VS Code with their different invocation models
  • Documentation on lifecycle phases explaining that spec, plan, and task artifacts are handoffs between sessions
  • Documentation of the command-wrapper discoverability limitation for Antigravity
  • Database-migration and dependency-audit vocabulary added to relevant skill descriptions for routing
Changed 3
  • security-and-hardening skill now requires symlink resolution, an allowlisted root, minimum depth, and ownership check for destructive path operations
  • Rate limiting in security-and-hardening skill now uses a shared store across instances instead of per-instance counters
  • observability-and-instrumentation skill now stamps the entry point next to the correlation ID when runs start across multiple entry points

From agent-skills

Agent Skills 0.6.9 is a docs, hardening, and contributor-process release. No new skills this time; it sharpens the security and observability guidance in existing skills, adds setup and workflow docs, and lands a governance mechanism for the catalog's own development.

Highlights
  • Advanced per-agent configuration guide (#316, @nucliweb). The canonical reference for keeping SKILL.md frontmatter portable and pushing vendor-specific runtime controls (model, tools, turn limits, thinking level) into metadata or a per-agent adapter, so the same skill file works across Claude Code, Cursor, Gemini, Antigravity, and other spec-conformant clients.
  • Rejected skill-change ledger (#544, from #535). An append-only record of skill and description changes that were proposed and rejected, together with the eval score that rejected them, so the same idea does not get re-litigated in a new PR. Checking it is now a pre-flight step in CONTRIBUTING, and the ledger row lands on the default branch so closing the rejected PR cannot erase the record.
Hardening (existing skills)
  • security-and-hardening: destructive path operations (delete, move, overwrite) now require symlink resolution, an allowlisted root, a minimum depth, and an ownership check read before the call (#547, @notbucki). And rate limiting must count in a shared store across instances, since a per-instance counter silently stops working the moment you run more than one instance (#536, @CahidArda).
  • observability-and-instrumentation: when several entry points write to one log stream, stamp the entry point next to the correlation ID at the point the run starts. A correlation ID says which run; it does not say which code path started it (#546, @notbucki).
Docs
  • Copilot: the standalone copilot CLI (plugin install) and Copilot inside VS Code are separate setups with different invocation models, now documented as such (#550, @DEOWL-kan, addressing #542).
  • Lifecycle: the spec, plan, and task artifacts are the handoff between sessions. Run the whole lifecycle in one session for a small task; use a fresh session per phase for anything non-trivial (#549, @DEOWL-kan, from #513).
  • Antigravity: the command-wrapper discoverability limitation is documented (#532, @ayobamiseun, from #445).
  • Routing: database-migration and dependency-audit vocabulary added to the relevant skill descriptions (#537, @notbucki).
Thanks

Thanks to everyone who contributed this release: @nucliweb, @DEOWL-kan, @notbucki, @CahidArda, @ayobamiseun, @mvanhorn, and @federicobartoli.

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.8...0.6.9

View originalPermalink
How 0.6.9 went

0.6.8

Added 2
  • New skill constraint-driven-development establishes a project's quality bar as a written contract in CONSTRAINTS.md, interviews on relevant dimensions, supplies defaults, maps dimensions to tools with install and run commands, and watches diffs for weakened bars including new suppressions, skipped tests, stripped assertions, unimplemented stubs, and edited-down thresholds
  • performance-optimization now documents its Guard step and a new validator rule enforces that any workflow advertising numbered steps documents each one
Changed 3
  • performance-optimization skill deepened with real backend and database substance including query plan reading, index decisions, connection-pool exhaustion, and caching strategies with layer choice, key design, invalidation strategy, and stampede protection
  • planning-and-task-breakdown no longer silently overwrites an incomplete plan and instead stops and asks if tasks/plan.md still has unchecked tasks for different work
  • code-reviewer persona now uses the same severity labels as the code-review skill (Critical / Required / Optional / Nit)
Fixed 2
  • Validator section-exemption lookup now uses Object.hasOwn so a skill directory named constructor can no longer slip past required-section checks via the prototype chain
  • git-workflow-and-versioning picked up pull-request vocabulary so it routes for PR-phrased asks

From agent-skills

Agent Skills 0.6.8 adds a new skill for setting and holding a project's quality bar, deepens the performance guidance with real backend and database substance, and clears a round of fixes.

First, a thank you. This repository just passed 90,000 stars. That is entirely down to the people who use these skills, file sharp issues, send careful PRs, and field-test them on real projects. Thank you, genuinely. This release is a good snapshot of that: a new skill, a large contribution from a collaborator, and a handful of fixes that came straight from your reports.

Highlights
  • New skill: constraint-driven-development (#472). Establishes a project's quality bar as a written contract (CONSTRAINTS.md), interviews you on which dimensions matter, supplies sane defaults when you have no number in mind, maps every dimension to a de facto tool with install and run commands, and watches the diff for a weakened bar: new suppressions, skipped tests, stripped assertions, unimplemented stubs, thresholds edited down. It ships a reference floor-guard so agents enforce the floor the same way across runs and stacks instead of reinventing one each time. Thanks to @federicobartoli for a field-test-driven review that shaped it.
  • performance-optimization, deepened (#521, @nucliweb). Real backend and database depth: reading the query plan before reaching for an index, when an index will not help, connection-pool exhaustion, and caching strategies (layer choice, key design keyed on the viewer, one invalidation strategy, stampede protection). Decision material in the skill, patterns and checklist in references/performance-checklist.md.
Skills and content
  • performance-optimization now documents its Guard step (it was declared in the workflow but never written up), and a new validator rule enforces that any workflow advertising numbered steps documents each one (#525, @CBOSSX).
  • planning-and-task-breakdown no longer silently overwrites an incomplete plan: if tasks/plan.md still has unchecked tasks for different work, it stops and asks rather than destroying state that may be mid-build in another session (#526, @ayobamiseun, from #518).
Fixes and tooling
  • The code-reviewer persona now uses the same severity labels as the code-review skill (Critical / Required / Optional / Nit), so a finding is labeled the same whichever entry point runs the review.
  • Validator: the section-exemption lookup uses Object.hasOwn, so a skill directory named constructor can no longer slip past the required-section checks via the prototype chain (#505, @abhisheksharma2411).
  • OpenCode setup docs corrected for repo-scoped skill installation (#516, @alexmarco, closes #515).
  • git-workflow-and-versioning picked up pull-request vocabulary so it routes for PR-phrased asks (#508, @superandy8288).
Thanks

Thanks to everyone who contributed this release: @nucliweb, @ayobamiseun, @CBOSSX, @abhisheksharma2411, @alexmarco, @superandy8288, and @federicobartoli. And thank you to the wider community for getting us past 90,000 stars.

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.7...0.6.8

View originalPermalink
How 0.6.8 went

0.6.7

Added 6
  • Command Code is a native provider that reads the pack's skills/ directly via cmd skills
  • spec-driven-development: Phase 0 capability map for large, multi-capability requests
  • api-and-interface-design: idempotency-key implementation guide
  • security-and-hardening: Data Privacy & Compliance section
  • source-driven-development: retrieval safety guidance for treating fetched docs as untrusted data
  • CI guards: artifact-path validator for spec/plan/todo and Node 24 runtimes support
Changed 3
  • Plugin manifests are pinned to the release version with CI check to keep them in lockstep with the tag
  • planning-and-task-breakdown: task-list target is now pluggable for external trackers
  • Eval hardening with incomplete grader results rejection, improved TDD case, throwaway-workspace cleanup, and --behavioral skill-name validation
Fixed 4
  • Codex SessionStart hook now emits the standard SessionStart envelope on every path
  • Shared reference links to references/ checklists now resolve correctly with CI validator
  • Codex install flow completed and plugin metadata aligned
  • Antigravity install path corrected for current agy releases

From agent-skills

Agent Skills 0.6.7 is a fixes-and-content release: a live Codex hook fix, honest plugin-manifest versions, a new provider, real skill-content additions, and a round of CI guards.

Highlights
  • Codex SessionStart hook fixed (#474, @ayobamiseun). The session-start hook now emits the standard SessionStart envelope on every path, so Codex CLI (and Claude Code) stop rejecting it. Resolves the hook failure in #465.
  • Plugin manifests now tell the truth about versions (#451, @Liyuk, closes #440). Every manifest is pinned to the release version, with a CI check that keeps them in lockstep with the tag, so update detection works and the versions can't silently drift again.
  • Command Code is a native provider (#450, @vipulgupta2048). Command Code reads the pack's skills/ directly via cmd skills, so it's real support, not just a listing. See docs/commandcode-setup.md.
  • Shared reference links fixed and guarded (#469, @coolTheWorld, closes #468). The skill links to the shared references/ checklists were wrong even in a full install; they now resolve, with a CI validator to keep them that way.
Skills and content
  • spec-driven-development: a Phase 0 capability map for large, multi-capability requests, propose a module map and dependency order before speccing, while leaving the simple single-spec path untouched (#476, @ayobamiseun, from #431).
  • planning-and-task-breakdown: the task-list target is now pluggable, so teams on an external tracker (beads, Jira, Linear) aren't forced into tasks/todo.md (#487, @ayobamiseun, closes #482).
  • api-and-interface-design: an idempotency-key implementation guide, derive the key from the intent, not the attempt (#479, @abhisheksharma).
  • security-and-hardening: a Data Privacy & Compliance section, classify data as you add it (#470, @HMAKT99).
  • source-driven-development: retrieval safety, treat fetched docs as untrusted data and never hardcode outbound endpoints from examples (#53, @KoolP).
Tooling and fixes
  • Codex install flow completed and plugin metadata aligned (#452, @dev-minggyu).
  • Antigravity install path corrected for current agy releases (#481, @yunaremaia, from #445).
  • Eval hardening: reject incomplete grader results (#473, @NgoQuocViet200), a more discriminating TDD case (#471, @federicobartoli), throwaway-workspace cleanup (#458) and --behavioral skill-name validation (#456, @Sunil56224972).
  • New CI guards: artifact-path validator for spec/plan/todo (#464, @nucliweb) and Node 24 runtimes (#459, @ENNEADLABS).
Thanks

Thanks to everyone who contributed this release: @ayobamiseun, @Liyuk, @coolTheWorld, @vipulgupta2048, @HMAKT99, @abhisheksharma, @federicobartoli, @NgoQuocViet200, @yunaremaia, @dev-minggyu, @KoolP, @Sunil56224972, @nucliweb, and @ENNEADLABS.

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.6...0.6.7

View originalPermalink
How 0.6.7 went

0.6.6

Added 4
  • Add explicit verify step to performance-optimization workflow to re-measure and revert changes that are within noise or fail tests
  • Add ledger tracking to performance-optimization workflow to prevent silently retrying reverted optimizations
  • Add regression coverage for the command validator to lock down command-parity behavior
  • Document the per-skill reference limitation that the repo-level references/ directory does not travel with individual skill installations
Changed 1
  • Update skills across the catalog to describe the repository's own test, build, and audit commands with concrete examples instead of hardcoding npm
Fixed 1
  • Restore four agent personas (code-reviewer, security-auditor, test-engineer, and web-performance-auditor) that were not loading on Claude Code by removing the explicit agents array from the Claude Code plugin manifest

From agent-skills

Agent Skills 0.6.6 is primarily a fix release. It restores the four agent personas that were silently not loading on the Claude Code plugin, and rounds out the ecosystem-neutral pass and the performance-optimization workflow.

Highlights
  • The four personas load again on Claude Code (#449, reported by @ingnicolaboccato-lab). The explicit agents array in .claude-plugin/plugin.json was suppressing Claude Code's own discovery of agents/*.md, so code-reviewer, security-auditor, test-engineer, and web-performance-auditor were loading for nobody on the plugin. Removing the key restores all four. Reproduced and verified on Claude Code 2.1.219: Agents (0) before, Agents (4) after. If you installed the plugin, update to pick this up. Scoped to the Claude Code manifest; the Codex manifest is unchanged.
  • Verify step for performance work (#403, @asiridalugoda). performance-optimization gains an explicit keep-or-revert step: re-measure the same way you took the baseline, and if the change is within noise or fails its tests, revert it. Neutral is a revert, not a keep. It also adds a short ledger so a reverted optimization does not get silently retried later.
  • Ecosystem-neutral pass completed (#425, @ayobamiseun). Phase 2 of #404 extends the work started in 0.6.5 across the rest of the catalog: skills describe the repository's own test, build, and audit commands with one concrete example, rather than hardcoding npm, so the guidance reads correctly on Python, Go, Rust, and the rest.
Tooling and fixes
  • Regression coverage for the command validator, locking down command-parity behavior after the recent validator churn (#443, @ayobamiseun).
  • Document the per-skill reference limitation from #361, so anyone installing a single skill knows the repo-level references/ directory does not travel with it (#442, @ayobamiseun).
Thanks

Thanks to everyone who contributed this release: @ingnicolaboccato-lab, @asiridalugoda, and @ayobamiseun.

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.5...0.6.6

View originalPermalink
How 0.6.6 went

0.6.5

Added 3
  • Dialogue evals are now supported for skills whose deliverable is the conversation itself rather than a file edit
  • New skill-gap issue form so people can report guidance that doesn't match reality in a structured way
  • Shared references/ design is now documented with its rationale and skill-local references/ directory is described as the emerging convention
Changed 5
  • Eval gates are now enforced in CI on every push with a rank-1 floor and ratcheted routing quality
  • Lint rules were extracted into scripts/lib/skill-lint.js with their own unit tests
  • test-driven-development skill no longer hardcodes npm and instead describes the repository's own test command
  • ADR skill now detects and matches an existing ADR convention before creating a new one
  • README spacing and copy tidy-ups
Fixed 4
  • Skill validator no longer trips over headings inside fenced code blocks or negated trigger phrases
  • Orchestration-patterns reference mapping in the getting-started docs so the links resolve
  • Opt-in hook paths are now quoted in the setup docs so installs no longer break on paths with spaces
  • The simplify-ignore-test hook asserts its no-jq guard instead of failing when jq is absent

From agent-skills

Agent Skills 0.6.5 graduates the eval framework from opt-in to CI-enforced, hardens the validators, and kicks off an ecosystem-neutral pass so the skills stop assuming a JavaScript stack. Mostly a quality-and-infrastructure release on top of 0.6.4.

Highlights
  • Eval gates are now trusted and enforced in CI (#381, @ZhiyaoWen999). The deterministic trigger-and-routing tier runs on every push with a rank-1 floor, the gates are ratcheted so routing quality can only move up, and dialogue evals are supported for skills whose deliverable is the conversation itself rather than a file edit. The framework shipped in 0.6.4; this is where it starts actually guarding the pack.
  • Validators hardened (#387/#405, @kevglynn; #379, @nucliweb). The skill validator no longer trips over headings inside fenced code blocks or negated trigger phrases, and the lint rules were extracted into scripts/lib/skill-lint.js with their own tests so the rules are unit-tested instead of buried in the runner.
  • Ecosystem-neutral pass, Phase 1 (#419, @ayobamiseun). test-driven-development no longer hardcodes npm; it describes the repository's own test command with one concrete example, so the guidance reads correctly on Python, Go, Rust, and the rest. This is the first skill in a broader pass.
Skills and content
  • ADR skill now detects and matches an existing ADR convention before creating a new one, and stays repository-local and forge-agnostic (#402, @CybotTM).
  • Fixed the orchestration-patterns reference mapping in the getting-started docs so the links resolve (#407, @Quantum22).
Tooling and fixes
  • fix(hooks): opt-in hook paths are now quoted in the setup docs, so installs no longer break on paths with spaces (#420, @jagadishs-oss).
  • fix(hooks): the simplify-ignore-test hook asserts its no-jq guard instead of failing when jq is absent (#406, @youjinch).
Docs
  • The shared references/ design is now documented with its rationale, and the skill-local references/ directory is described as the emerging convention for self-contained skills (#401, @kevglynn; #236, @nucliweb; closes #329).
  • New skill-gap issue form so people can report guidance that doesn't match reality in a structured way (#418, @Alex7develop).
  • README spacing and copy tidy-ups (#107, @ZuoFuhong).
Thanks

Thanks to everyone who contributed this release: @ZhiyaoWen999, @nucliweb, @kevglynn, @ayobamiseun, @CybotTM, @Quantum22, @jagadishs-oss, @youjinch, @Alex7develop, and @ZuoFuhong.

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.4...0.6.5

View originalPermalink
How 0.6.5 went

0.6.4

Added 6
  • Skill eval framework with three-tier validation system including structural validation, deterministic trigger-and-routing checks in CI, and optional behavioral tier for grading execution traces
  • Native Codex support to install as a Codex plugin with codex plugin marketplace add addyosmani/agent-skills
  • Dependency-upgrade workflow to code-review-and-quality skill
  • Database expand/contract schema migrations to deprecation-and-migration skill
  • New adoption guide covering greenfield vs brownfield rollout with verification-first path for established codebases
  • New developer-onboarding guide for contributors working on the repository
Changed 8
  • Frontend and performance skill descriptions updated to match user vocabulary, improving trigger rank-1 rate to 86%
  • Playwright examples switched to accessibility-first role and label locators
  • Quick Start in README now leads with npx skills add addyosmani/agent-skills as fastest install path
  • Documented HTTPS git-config workaround for plugin install SSH failures on Windows and macOS
  • Cursor setup modernized for native .cursor/skills
  • comparison.md refreshed with expanded how to decide section and documented no-translations policy
  • AGENTS.md and CLAUDE.md clarified as repo-scoped with Team section added to README
  • webperf configuration guidance updated to keep CrUX API keys in environment variables rather than hard-coded
Fixed 1
  • Hardened eval and command validators for CRLF and Windows line endings with fixture path-traversal guard
Security 1
  • Supply-chain hardening with package-manager and version-aware dependency guidance and install-script gate that blocks unreviewed lifecycle scripts before first install

From agent-skills

Agent Skills 0.6.4 adds two big pieces, an in-repo skill eval framework and native Codex support, alongside a security-hardening pass, real skill-content additions, and a wave of adoption and contributor docs.

Highlights
  • Skill eval framework (#342). A three-tier system that checks the pack actually works: structural validation, a deterministic trigger-and-routing tier that runs in CI (does each skill's description carry the words users say, and do any two skills collide), and an opt-in behavioral tier that grades a real execution trace against per-skill expectations. Neither of the packs we get compared to ships this in-repo.
  • Native Codex support (#88). Install as a Codex plugin with codex plugin marketplace add addyosmani/agent-skills; the root skills/ directory is read directly through .codex-plugin/plugin.json, no duplication.
  • Fastest install path in the README. npx skills add addyosmani/agent-skills now leads the Quick Start, one command across 70+ agents, with per-skill installs for the headline skills.
  • Supply-chain hardening (#392). The dependency guidance is now package-manager and version aware, with an install-script gate that blocks unreviewed lifecycle scripts before the first install, the exact hole the recent npm postinstall worms used.
Skills and content
  • Dependency-upgrade workflow added to code-review-and-quality (#346, @HMAKT99).
  • Database expand/contract schema migrations added to deprecation-and-migration (#345, @HMAKT99).
  • Frontend and performance descriptions now carry the vocabulary users actually type; trigger rank-1 rate up to 86% (#358, @ZhiyaoWen999).
  • Playwright examples switched to accessibility-first role and label locators (#359, @debs-obrien).
Tooling and fixes
  • Harden the eval and command validators for CRLF and Windows line endings, plus a fixture path-traversal guard (#372, @ShiroKSH).
  • webperf config note: keep CrUX API keys in environment variables, never hard-coded (#357, @orbisai0security).
  • Document the HTTPS git-config workaround for /plugin install SSH failures on Windows and macOS (#368, @mvanhorn).
Docs
  • New adoption guide: greenfield vs brownfield rollout, with a verification-first path for established codebases (#396, @nucliweb).
  • New developer-onboarding guide for people working on the repo itself (#397, @nucliweb).
  • Cursor setup modernized for native .cursor/skills (#218, @nguyenducthaonguyen).
  • comparison.md refreshed and expanded with a fuller "how to decide" section; no-translations policy documented (#375, @nucliweb); AGENTS.md and CLAUDE.md clarified as repo-scoped (#374, @nucliweb); a Team section added to the README.
Thanks

Thanks to everyone who contributed this release: @nucliweb, @federicobartoli, @HMAKT99, @ZhiyaoWen999, @ShiroKSH, @mvanhorn, @nguyenducthaonguyen, @debs-obrien, and @orbisai0security.

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.3...0.6.4

View originalPermalink
How 0.6.4 went

0.6.3

Added 8
  • New observability reference checklist covering on-call questions, RED/USE metrics, and symptom-based alerting
  • New project-wide Definition of Done reference checklist
  • New comparison documentation (docs/comparison.md) comparing agent-skills with Superpowers and Matt Pocock's skills
  • CONTRIBUTING pre-flight checklist as guardrail against duplicate skills
  • Path-scoped .claude/rules/ guardrail to prevent skill duplication
  • PR-overlap guideline to prevent duplicate skills
  • git-workflow-and-versioning skill now includes release and versioning guidance covering semver, tags, and changelog
  • planning skill now documents the tasks/plan.md and tasks/todo.md output paths
Changed 7
  • code-review-and-quality skill gains structural-depth lenses including reduce-don't-relocate pattern, a named Structural Remedies catalog, a file-size gate, and finding prioritization
  • Severity labels in code-review-and-quality now line up with the skill's own taxonomy
  • Validator and CI upgraded to enforce naming, description triggers, and command-description parity
  • spec-driven-development skill now delegates task mechanics to planning-and-task-breakdown
  • browser-testing skill defaults to an isolated profile
  • Use repo-relative script paths instead of the old /mnt/skills/user/ form
  • Antigravity code-simplify now reads AGENTS.md
Fixed 5
  • debugging skill step range
  • Gemini /ship agent path
  • Explain the expected commands/ ignored plugin warning and clear the underlying lint without breaking Antigravity
  • Make helper scripts executable
  • hooks.json path fallback for manual installs

From agent-skills

Agent Skills 0.6.3 sharpens code review, adds two new reference checklists and an honest comparison doc, and introduces a set of guardrails that steer new-skill work away from duplication, plus a wave of community fixes and polish.

Highlights
  • Deeper code review. code-review-and-quality gains structural-depth lenses (reduce-don't-relocate, a named Structural Remedies catalog, a file-size gate, and finding prioritization), and its severity labels now line up with the skill's own taxonomy. (#304, #302)
  • Two new reference checklists. An observability checklist (on-call questions, RED/USE metrics, symptom-based alerting) and a project-wide Definition of Done. (#240, #317)
  • How it compares. A new docs/comparison.md puts agent-skills side by side with Superpowers and Matt Pocock's skills, with a link to a controlled head-to-head. (#300)
  • Guardrails against duplicate skills. A CONTRIBUTING pre-flight checklist, a path-scoped .claude/rules/ guardrail, a PR-overlap guideline, and validator/CI upgrades that enforce naming, description triggers, and command-description parity. (#301, #313, #325, #323, #270, #255)
Skills, commands & references
  • git-workflow-and-versioning: add release and versioning guidance (semver, tags, changelog). (#334, @HMAKT99)
  • spec-driven-development now delegates task mechanics to planning-and-task-breakdown. (#303, @nucliweb)
  • planning: document the tasks/plan.md and tasks/todo.md output paths. (#337, @hiyochi)
  • browser-testing: default to an isolated profile. (#239, @federicobartoli)
  • debugging: fix the step range. (#293, @shihyuho)
Fixes & polish
  • Use repo-relative script paths (drop the old /mnt/skills/user/ form). (#307, @creazyfrog)
  • Fix the Gemini /ship agent path. (#306, @creazyfrog)
  • Explain the expected "commands/ ignored" plugin warning, and clear the underlying lint without breaking Antigravity. (#305, @creazyfrog; #273, @CollabxConstruct)
  • Antigravity code-simplify reads AGENTS.md. (#288, @Dashsoap)
  • Make helper scripts executable. (#289, #276, @Dashsoap)
  • hooks.json path fallback for manual installs. (#269, @worldfunction4)
  • Move agents/README.md to docs/agents.md to fix a custom-agent frontmatter warning. (#260, @nucliweb)
Docs & CI
  • Document the /webperf command and setup. (#247, @Bortlesboat; #268, @CooperSheroy)
  • README and getting-started tidy: list orchestration-patterns, add code-simplify. (#290, #283, @Dashsoap)
  • Standardize actions/checkout to v6. (#275, @Dashsoap)
Thanks

Big thanks to everyone who contributed this release: @nucliweb, @federicobartoli, @HMAKT99, @Dashsoap, @creazyfrog, @An-idd, @Swing-G, @hiyochi, @shihyuho, @Bortlesboat, @CooperSheroy, @CollabxConstruct, and @worldfunction4.

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.2...0.6.3

View originalPermalink
How 0.6.3 went
0.6.2

v0.6.2

Added 4
  • Add /build auto command for one-pass plan and implement
  • Add web-performance-auditor persona and /webperf command
  • Add observability-and-instrumentation skill
  • Add native support for Antigravity CLI (agy)
Changed 1
  • Strengthen security skills with threat modeling, SSRF, supply chain, and AI/LLM coverage
Fixed 3
  • Use relative path source in marketplace to bypass install bug
  • Update marketplace.json to use explicit GitHub source format
  • Correct chrome-devtools-mcp install config in browser-testing

From agent-skills

What's Changed
New Contributors

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.1...0.6.2

View originalPermalink
How 0.6.2 went

0.6.1

Added 3
  • Add doubt-driven-development skill
  • Add interview-me skill during the Define phase
  • Add CI skill validator
Changed 1
  • Add reason to low-confidence numbers in interview-me
Fixed 4
  • Add guidance to prevent redundant build verification commands
  • Declare skills and agents paths in plugin.json
  • Add explicit cross-skill paths in spec-driven-development
  • Drop pinning version field from plugin.json

From agent-skills

What's Changed
New Contributors

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.6.0...0.6.1

View originalPermalink
How 0.6.1 went

0.6.0

Added 12
  • Three composable orchestration layers (Personas, Skills, Slash commands) defined in AGENTS.md and references/orchestration-patterns.md
  • Parallel fan-out orchestrator for /ship that runs code-reviewer, security-auditor, and test-engineer concurrently and merges their reports
  • Composition block to each persona file documenting how it composes with skills
  • Personas index at agents/README.md with a composition decision matrix
  • Orchestration patterns catalog at references/orchestration-patterns.md
  • Agent Teams worked example for competing-hypothesis debugging
Changed 6
  • /ship now replaces hand-wavy skip-fan-out rule with concrete thresholds (≤2 files, <50 lines, no auth/payments/data/config)
  • /planning command for Gemini CLI instead of /plan to avoid colliding with Gemini CLI internal command
  • Agent Teams system-prompt handling now appends instead of replaces
  • Added autocomplete requirement for known fields in forms to Accessibility Checklist skill
  • Expanded INP coverage in Performance Checklist skill with concrete optimization techniques
  • Added fonts section and yieldToMain pattern to Performance Checklist skill
Fixed 6
  • Properly JSON-escape SKILL.md content via jq to fix invalid JSON when content contains quotes or newlines
  • Gracefully fall back with an INFO-priority message when jq is missing on PATH instead of failing silently
  • Button accessibility guidance in Frontend UI Engineering skill
  • Custom button example in Frontend UI Engineering skill to align with native Space activation timing
  • Custom button example in Frontend UI Engineering skill to prevent teaching a scrolling interaction bug
  • Skip-to-content link must be visible on focus in Accessibility Checklist skill

From agent-skills

Agent Skills 0.6.0

This is an orchestration release. Personas, skills, and slash commands now compose as three explicit layers, and /ship runs three specialist personas in parallel against the current change before synthesizing a go/no-go decision. New tool integrations land for Gemini CLI, Kiro, and OpenCode, and source-driven-development gains an opt-in citation cache.

Orchestration

Three composable layers, defined in AGENTS.md and worked through in references/orchestration-patterns.md:

  • Personas - roles with a perspective and an output format (the who)
  • Skills - workflows with steps and exit criteria (the how)
  • Slash commands - user-facing entry points (the when)

Composition rule: the user (or a slash command) is the orchestrator. Personas do not invoke other personas.

  • Turned /ship into a parallel fan-out orchestrator that runs code-reviewer, security-auditor, and test-engineer concurrently and merges their reports
  • Replaced /ship's hand-wavy skip-fan-out rule with concrete thresholds (≤2 files, <50 lines, no auth/payments/data/config)
  • Added a Composition block to each persona file documenting how it composes with skills
  • Added a personas index (agents/README.md) with a composition decision matrix
  • Added an orchestration patterns catalog (references/orchestration-patterns.md)
  • Added an Agent Teams worked example for competing-hypothesis debugging
  • Documented Claude Code subagent and Agent Teams compatibility, including how skills, mcpServers, and permissionMode frontmatter are handled (silently dropped when used as teammates)
  • Corrected Agent Teams system-prompt handling — appended, not replaced
  • Noted /ship picks up user-defined personas in .claude/agents/ and ~/.claude/agents/ automatically (plugin scope is lowest priority)
New Tool Integrations
Gemini CLI
  • Added 7 slash commands under .gemini/commands/ (/spec, /planning, /build, /test, /review, /code-simplify, /ship) mirroring the Claude Code set
  • Used /planning instead of /plan to avoid colliding with a Gemini CLI internal command
  • Documented the commands in docs/gemini-cli-setup.md
Kiro IDE & CLI
  • Added Kiro to the README quick start with setup details and link formatting
OpenCode
  • Added a symlink so OpenCode resolves skills correctly out of the box
Hooks
Source-Driven Development citation cache
  • Opt-in citation cache so framework-doc lookups don't repeat across sessions
Session-start JSON robustness
  • Properly JSON-escape SKILL.md content via jq — fixes invalid JSON when content contains quotes or newlines
  • Gracefully fall back with an INFO-priority message when jq is missing on PATH instead of failing silently
Skill Improvements
Frontend UI Engineering
Accessibility Checklist
Performance Checklist
Skill Contribution Guidance
  • Aligned skill-contribution guidance across CLAUDE.md, AGENTS.md, docs/skill-anatomy.md, and the README — preserved third-person description guidance and corrected README formatting
Contributors

Thanks to everyone who landed changes in this release:

Full Changelog: https://github.com/addyosmani/agent-skills/compare/0.5.0...0.6.0

View originalPermalink
How 0.6.0 went
0.5.0

Agent Skills 0.5.0

Added 4
  • Source-Driven Development skill that grounds framework-specific implementation decisions in official documentation, with stack detection, citation format, and optional documentation cache
  • Art direction and resolution switching example with <picture>, AVIF → WebP → JPG cascade, and realistic sizes attributes
  • Suspense wrapper to code-splitting examples with clarified ESM and sideEffects: false requirements
  • Added See Also sections across SKILL.md files with cross-references to security, performance, accessibility resources, testing patterns, and pre-launch and review checklists
Changed 7
  • Performance Optimization skill now distinguishes synthetic and RUM measurements with guidance on when each applies
  • Expanded TTFB diagnosis into a decision tree covering DNS, TCP/TLS, and server processing with 800ms threshold aligned to web.dev
  • Clarified spec and task file lifecycle in Spec & Task Lifecycle documentation
  • Improved Gemini CLI configuration guide and fixed installation path for skills
  • Corrected GitHub Copilot skills setup instructions
  • Added OpenCode integration with agent-driven skill execution and clarified command support and agent-driven design
  • Added SSH troubleshooting hint to Marketplace install documentation
Fixed 2
  • Image optimization examples now use aspect-ratio, fetchpriority="high", and explicit width/height for hero/LCP images, and loading="lazy" + decoding="async" for below-the-fold images
  • Corrected date-fns tree-shaking example to use dynamic imports and route-level code splitting instead of relying on modern bundler handling
Removed 1
  • Removed decoding="sync" from hero image examples to avoid blocking the main thread

From agent-skills

Release Notes

New Skills
  • Source-Driven Development (#45) - New skill that grounds framework-specific implementation decisions in official documentation. Covers stack detection, citation format, handling conflicting sources, and an optional documentation cache. Framework-agnostic by design.
Skill Improvements
Performance Optimization (#40)
  • Distinguished synthetic (Lighthouse/CI) vs RUM (web-vitals) measurement, with guidance on when each applies.
  • Expanded TTFB diagnosis into a decision tree covering DNS, TCP/TLS, and server processing — mirrored in the checklist with TTFB "good" threshold aligned to web.dev (800ms).
  • Fixed image optimization examples: hero/LCP images now use aspect-ratio, fetchpriority="high", and explicit width/height; below-the-fold images use loading="lazy" + decoding="async". Removed decoding="sync" from hero examples to avoid blocking the main thread.
  • Added art direction + resolution switching example with <picture>, AVIF → WebP → JPG cascade, and realistic sizes attributes.
  • Corrected the date-fns tree-shaking example — modern bundlers handle named imports; replaced with dynamic imports and route-level code splitting.
  • Added Suspense wrapper to code-splitting examples; clarified ESM + sideEffects: false requirements.
Spec & Task Lifecycle (#42)
  • Clarified spec and task file lifecycle (fixes #39).
Documentation & Setup Guides
  • Gemini CLI (#43): Improved configuration guide and fixed installation path for skills.
  • GitHub Copilot: Corrected skills setup instructions (#21).
  • OpenCode: Added integration with agent-driven skill execution; clarified command support and agent-driven design.
  • Marketplace install (#37): Added SSH troubleshooting hint.
Cross-Reference Additions (#34)

Added "See Also" sections across multiple SKILL.md files linking to:

  • Security checklist references
  • Performance resources
  • Accessibility resources
  • Testing patterns
  • Pre-launch checklists (security, performance, accessibility)
  • Review guidance (security and performance review checklists)
Contributors

@federicobartoli, @nucliweb, @zerone0x, @bonigarcia, @faisalbasra, @dj2313, @cseas

View originalPermalink
How 0.5.0 went
View all

Discussion

If you publish agent-skills, you can claim this product by proving you administer its repository.