# agent-skills 0.6.7

- Product: agent-skills (https://whatsnew.fyi/product/agent-skills)
- Vendor: agent-skills
- Date: 2026-08-14
- Version: 0.6.7
- Original notes: https://github.com/addyosmani/agent-skills/releases/tag/0.6.7
- Permalink: https://whatsnew.fyi/product/agent-skills/releases/0.6.7

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Codex SessionStart hook now emits the standard SessionStart envelope on every path
- **changed** — Plugin manifests are pinned to the release version with CI check to keep them in lockstep with the tag
- **added** — Command Code is a native provider that reads the pack's skills/ directly via cmd skills
- **fixed** — Shared reference links to references/ checklists now resolve correctly with CI validator
- **added** — spec-driven-development: Phase 0 capability map for large, multi-capability requests
- **changed** — planning-and-task-breakdown: task-list target is now pluggable for external trackers
- **added** — api-and-interface-design: idempotency-key implementation guide
- **added** — security-and-hardening: Data Privacy & Compliance section
- **added** — source-driven-development: retrieval safety guidance for treating fetched docs as untrusted data
- **fixed** — Codex install flow completed and plugin metadata aligned
- **fixed** — Antigravity install path corrected for current agy releases
- **changed** — Eval hardening with incomplete grader results rejection, improved TDD case, throwaway-workspace cleanup, and --behavioral skill-name validation
- **added** — CI guards: artifact-path validator for spec/plan/todo and Node 24 runtimes support

Agent Skills 0.6.7 is a fixes-and-content release: a live Codex hook fix, honest plugin-manifest versions, a new provider, real skill-content additions, and a round of CI guards.

##### Highlights

- **Codex SessionStart hook fixed** (#474, @ayobamiseun). The session-start hook now emits the standard SessionStart envelope on every path, so Codex CLI (and Claude Code) stop rejecting it. Resolves the hook failure in #465.
- **Plugin manifests now tell the truth about versions** (#451, @Liyuk, closes #440). Every manifest is pinned to the release version, with a CI check that keeps them in lockstep with the tag, so update detection works and the versions can't silently drift again.
- **Command Code is a native provider** (#450, @vipulgupta2048). Command Code reads the pack's `skills/` directly via `cmd skills`, so it's real support, not just a listing. See docs/commandcode-setup.md.
- **Shared reference links fixed and guarded** (#469, @coolTheWorld, closes #468). The skill links to the shared `references/` checklists were wrong even in a full install; they now resolve, with a CI validator to keep them that way.

##### Skills and content

- **spec-driven-development**: a Phase 0 capability map for large, multi-capability requests, propose a module map and dependency order before speccing, while leaving the simple single-spec path untouched (#476, @ayobamiseun, from #431).
- **planning-and-task-breakdown**: the task-list target is now pluggable, so teams on an external tracker (beads, Jira, Linear) aren't forced into `tasks/todo.md` (#487, @ayobamiseun, closes #482).
- **api-and-interface-design**: an idempotency-key implementation guide, derive the key from the intent, not the attempt (#479, @abhisheksharma).
- **security-and-hardening**: a Data Privacy & Compliance section, classify data as you add it (#470, @HMAKT99).
- **source-driven-development**: retrieval safety, treat fetched docs as untrusted data and never hardcode outbound endpoints from examples (#53, @KoolP).

##### Tooling and fixes

- Codex install flow completed and plugin metadata aligned (#452, @dev-minggyu).
- Antigravity install path corrected for current `agy` releases (#481, @yunaremaia, from #445).
- Eval hardening: reject incomplete grader results (#473, @NgoQuocViet200), a more discriminating TDD case (#471, @federicobartoli), throwaway-workspace cleanup (#458) and `--behavioral` skill-name validation (#456, @Sunil56224972).
- New CI guards: artifact-path validator for spec/plan/todo (#464, @nucliweb) and Node 24 runtimes (#459, @ENNEADLABS).

##### Thanks

Thanks to everyone who contributed this release: @ayobamiseun, @Liyuk, @coolTheWorld, @vipulgupta2048, @HMAKT99, @abhisheksharma, @federicobartoli, @NgoQuocViet200, @yunaremaia, @dev-minggyu, @KoolP, @Sunil56224972, @nucliweb, and @ENNEADLABS.

**Full Changelog**: https://github.com/addyosmani/agent-skills/compare/0.6.6...0.6.7