v1.19.2

Bug Fix

• Fix composioHQ repo rename: Updated composioHQ/awesome-claude-code-skills → composioHQ/awesome-claude-skills across fetcher, marketplace CLI, and skills index (#73, closes #72)
  • skillkit recommend --update was failing with 404 due to the upstream repo rename

v1.19.1

Website

• Simplified homepage from 14 to 9 sections by removing WhySkillKit, StackBuilder, BadgeGenerator, Commands, and TeamEnterprise
• Added lightweight docs CTA linking to full documentation for commands, team workflows, and integrations
• Updated nav: replaced Extension link with Docs, removed duplicate Docs link

v1.19.0 — Server-Side Save Skill API

What's New

Server-Side Save Skill API (PR #66)

Moved Chrome extension's webpage-to-skill conversion from client-side content scripts to a server-side API route. This eliminates the Chrome Web Store rejection (content scripts don't inject on pre-existing tabs) and uses the full SkillKit extraction pipeline.

Architecture change:

Before: Extension → Content Script (Turndown) → Download
After:  Extension → POST /api/save-skill { url } → Server pipeline → Download

New: POST /api/save-skill API route (docs/fumadocs/src/app/api/save-skill/route.ts)

• Turndown HTML→Markdown conversion with GitHub URL auto-detection
• 5-source weighted tag detection (URL segments, headings, code blocks, keywords, language)
• SSRF protection blocking private IPs, link-local, and multicast addresses
• Rate limiting (10 req/min per IP)
• 5MB response body size limit

Simplified Chrome extension:

• Removed content script, scripting permission, and content_scripts manifest block
• Only 3 minimal permissions: activeTab, contextMenus, downloads
• Selection saves still work offline via Chrome's native selectionText
• Non-JSON error responses handled gracefully
• YAML-escaped URLs in frontmatter

Updated privacy policy and store listing to accurately disclose the URL→server data flow.

Upgrade

npm install -g skillkit@1.19.0

Extension

Download skillkit-extension-v1.19.0.zip below, unzip, and load in Chrome via chrome://extensions → "Load unpacked".

v1.18.0 — Issue Planner, Doctor, Session Snapshots

What's New

Issue Planner

Turn any GitHub Issue into a structured execution plan for 44 agents.

skillkit issue plan "#42"
skillkit issue plan rohitg00/skillkit#42 --agent cursor
skillkit issue list --label bug

• Parses checkboxes (- [ ]) into plan tasks
• Extracts file paths from backtick mentions
• Maps labels to tags (bug → fix, enhancement → feature)
• Adds test steps automatically (--no-tests to skip)
• No LLM calls — pure parsing, works offline
• Output works with skillkit plan validate and skillkit plan execute

Doctor Command

Diagnose setup issues and check environment health.

skillkit doctor
skillkit doctor --fix
skillkit doctor --json

• Checks Node.js, npm, pnpm, SkillKit version
• Validates config file and agent detection
• Scans project/global skills directories
• Finds broken symlinks (auto-fix with --fix)
• Validates all installed skills

Enhanced Status Command

Project overview when no active session.

skillkit status

• Shows detected agent, config, version
• Displays project/global skill counts
• Recent execution history

Session Snapshots

Save and restore full session state.

skillkit session snapshot save "before-refactor" --desc "Clean state"
skillkit session snapshot restore "before-refactor"
skillkit session snapshot list
skillkit session snapshot delete "old-snapshot"

Session Explain

Human-readable session summaries.

skillkit session explain
skillkit session explain --json

• Duration, skills used, tasks completed
• Files modified, git commits today
• Observation counts (errors, solutions, patterns)

Skill Activity Log

Track which skills are active during git commits.

skillkit activity
skillkit activity --skill code-simplifier
skillkit activity --json

Bug Fixes

• ObservationStore.readAll() — static method that reads without sessionId mismatch
• doctor uses getAdapter() per agent instead of spread-based getAllAdapters()
• doctor uses AGENT_CONFIG for global skills paths instead of hardcoded formula
• session-explainer defensively handles missing history/decisions arrays
• session-explainer resolves agent name from config with skillSource fallback
• Snapshot restore now properly restores observations

Stats

• 3,451 lines added across 25 files
• 29 new issue planner tests
• 15 activity log tests
• 9 session explainer tests
• 6 snapshot manager tests
• All 971+ tests passing

v1.17.0 — Chrome Extension & MCP Server Fix

Chrome Extension — Save as Skill (#60, #62)

Save any webpage as a SKILL.md with one click — fully browser-based, no server needed.

• Popup UI: Click extension icon → save current page as a skill
• Context menu: Right-click → "Save page as Skill" / "Save selection as Skill"
• Auto-tags: Smart detection from 40+ tech keywords
• Markdown conversion: HTML → clean markdown via Turndown
• Downloads API: Saves to Downloads/skillkit-skills/ — zero server dependency

Website & Docs

• "Add to Chrome" button in Hero section
• "Extension" nav link
• New chrome-extension.mdx docs page
• README section with install instructions

MCP Server Fix (#58, #63)

Fixed @skillkit/mcp silently exiting when invoked via npx:

• Symlink resolution: isMain guard now uses realpathSync() on both process.argv[1] and import.meta.url
• Graceful fallback: try/catch prevents crashes when imported as a library
• skills.json bundled: prebuild copies marketplace/skills.json into package data/ dir (15,065 skills)
• Version string: Updated from 1.12.0 to 1.17.0

POST /save API Endpoint

New endpoint for CLI/programmatic skill saving with SSRF protection:

• IPv6 bracket handling, IPv6-mapped IPv4, full loopback range
• Multicast/Class E blocking
• DOMException-based timeout detection

v1.16.0 - 44 Agents Support

What's New

12 New AI Agents (32 → 44 total)

Added support for: Devin, Aider, Sourcegraph Cody, Amazon Q Developer, Augment Code, Replit Agent, Bolt, Lovable, Tabby, Tabnine, CodeGPT, PlayCode Agent

Each agent gets proper config (skillsDir, configFile, format) and auto-detection.

GenericAgentAdapter (Bug Fix)

Fixed critical bug where 26 agents shared UniversalAdapter, causing wrong type, skillsDir, and name. Replaced with GenericAgentAdapter that reads per-agent config from AGENT_CONFIG.

Updated Banner

Refreshed monochromatic SVG banner with updated agent count and improved spacing.

Full Changelog

• feat: add 12 missing AI coding agents
• fix: replace UniversalAdapter with GenericAgentAdapter for all non-universal agents
• fix: expand translateSkillToAll to include all 44 agents
• test: 115+ adapter tests for GenericAgentAdapter correctness
• style: updated banner and README for 44 agents
• docs: updated all agent counts across documentation

v1.15.0

What's New

Security Scanner (#50)

• 46+ detection rules across 6 threat categories: prompt injection, command injection, data exfiltration, tool abuse, hardcoded secrets, and unicode steganography
• 3 analyzers: StaticAnalyzer (regex pattern matching), ManifestAnalyzer (SKILL.md validation), SecretsAnalyzer (credential detection)
• CLI command: skillkit scan <path> with --format (summary/json/table/sarif), --fail-on, --skip-rules
• Install integration: Skills are automatically scanned during skillkit install (use --no-scan to skip)
• Publish integration: Auto-scan before skillkit publish
• SARIF output: Upload to GitHub Code Scanning for IDE integration

TUI Security Scan Screen (#53)

• New Scan screen in the terminal UI (press z to navigate)
• Live scan execution with severity-colored findings
• Finding navigation with j/k keys, rescan with r
• Windowed list rendering for large result sets

Security Documentation (#53)

• New dedicated Security Scanning docs page with full rule reference
• All 46+ rules documented with IDs, descriptions, and severity levels
• CI/CD integration guide with GitHub Actions example
• Programmatic SkillScanner API documentation

Website Fixes

• Fix initial stars loader (#51): Removed stale hardcoded values, shows dash placeholder while loading
• Fix compatibility matrix (#52): Rewrote with accurate agent capability data from real agent adapters
• Product Hunt top post badge (#54): Updated from "featured" to "top post daily" badge
• Live PH upvote count (#49): Embed badge with live count

Commits since v1.14.0

• feat: add security scanner for detecting malicious patterns in skills (#50)
• fix: remove hardcoded initial stars count from website loader (#51)
• fix: rewrite compatibility matrix with accurate agent capability data (#52)
• docs: add security scanner documentation, TUI screen, and README updates (#53)
• feat: update Product Hunt badge to top post daily badge (#54)
• fix: use PH embed badge image with live upvote count (#49)
• feat: show live Product Hunt upvotes, remove Apache license from stats bar (#48)
• feat: add Product Hunt featured badge to website stats bar (#47)
• feat: add live GitHub stars CTA and redesign README banner (#46)

Full Changelog: v1.14.0...v1.15.0

What's Changed

• feat: add live GitHub stars CTA and redesign README banner by @rohitg00 in #46
• feat: add Product Hunt badge to website by @rohitg00 in #47
• feat: live PH upvotes in stats bar, remove license badge by @rohitg00 in #48
• fix: use PH embed badge with live upvotes by @rohitg00 in #49
• feat: add security scanner for detecting malicious patterns in skills by @rohitg00 in #50
• fix: remove hardcoded initial stars count from website by @rohitg00 in #51
• fix: rewrite compatibility matrix with accurate agent data by @rohitg00 in #52
• feat: update Product Hunt badge to top post daily by @rohitg00 in #54
• docs: add security scanner docs, TUI screen, and README updates by @rohitg00 in #53

Full Changelog: v1.14.0...v1.15.0

v1.14.0 - Smart Context Generation

🚀 Smart Context Generation

SkillKit now includes AI-powered skill generation that goes beyond simple LLM prompts. The new skillkit generate command pulls context from 4 sources and creates agent-optimized skills.

✨ Key Features

Multi-Provider LLM Support

• Claude (Anthropic)
• GPT-4/GPT-4o (OpenAI)
• Gemini (Google)
• Ollama (local models)
• OpenRouter (100+ models)

4 Context Sources

• 📚 Documentation via Context7 MCP
• 💻 Your codebase patterns
• 🛒 15,000+ marketplace skills
• 🧠 Your corrections and learnings

Agent-Specific Optimization

• Generates tailored output for 32 agents
• Trust scoring (0-10) with grades
• Compatibility matrix per agent

Skill Composition

skillkit generate --compose "testing patterns for react"

Natural language search finds and composes existing skills automatically.

📖 Usage

# Interactive wizard (recommended)
skillkit generate

# Use specific provider
skillkit generate --provider openai --model gpt-4o

# Target specific agents
skillkit generate --agents claude-code,cursor

🔧 Installation

npx skillkit@latest

📋 Full Changelog

New Files (40+)

• packages/core/src/ai/providers/ - 6 LLM providers
• packages/core/src/ai/context/ - 4 context sources
• packages/core/src/ai/composition/ - Skill composition engine
• packages/core/src/ai/agents/ - Agent optimization
• packages/core/src/ai/wizard/ - Interactive wizard
• packages/core/src/ai/security/ - Trust scoring + injection detection
• packages/cli/src/commands/generate.ts - Generate command

Documentation

• Updated CLI commands reference
• Added Generate Command section
• Updated website Advanced Features

---

Full documentation

v1.13.0 - Memory Lifecycle Hooks & Progressive Disclosure

What's New

Memory Lifecycle Hooks

Automatic memory capture and injection via Claude Code lifecycle hooks:

Hook	Trigger	Action
SessionStart	Session begins	Inject relevant learnings
PostToolUse	Tool completes	Capture outcomes as observations
SessionEnd	Session closes	Compress observations to learnings

Progressive Disclosure (Token Optimization)

3-layer retrieval system for efficient context usage:

Layer	Content	~Tokens
Index	Titles, tags, timestamps	50-100
Timeline	Context, excerpts, activity	~200
Details	Full content, metadata	500-1000

Auto-CLAUDE.md Updates

Sync your most effective learnings to CLAUDE.md:

skillkit memory sync-claude

This populates the ## LEARNED section with high-effectiveness insights.

New CLI Commands

skillkit memory sync-claude   # Update CLAUDE.md with learnings
skillkit memory index         # View memory index (Layer 1)

API Additions

MemoryHookManager

import { MemoryHookManager } from '@skillkit/core'

const manager = new MemoryHookManager(projectPath)
await manager.onSessionStart()
await manager.onToolUse({ tool_name: 'Write', ... })
await manager.onSessionEnd()

ProgressiveDisclosureManager

import { ProgressiveDisclosureManager } from '@skillkit/core'

const pdm = new ProgressiveDisclosureManager(projectPath)
const index = pdm.getIndex({ includeGlobal: true })
const result = pdm.smartRetrieve('auth patterns', 2000)

ClaudeMdUpdater

import { ClaudeMdUpdater } from '@skillkit/core'

const updater = new ClaudeMdUpdater(projectPath)
updater.update({ minEffectiveness: 70 })

Changes

• Add Claude Code lifecycle hooks (SessionStart, PostToolUse, SessionEnd)
• Implement 3-layer progressive disclosure for token-optimized retrieval
• Add CLAUDE.md auto-updater to populate LEARNED section
• Add auto-compression threshold trigger in observation store
• Cross-platform path handling using path.basename()
• Nullish coalescing for maxResults defaults
• Guard against non-positive tokenBudget
• Thread minRelevance option through findRelevantIds()
• Remove 139 lines of unnecessary inline comments (code cleanup)
• Update documentation with new memory features

Full Changelog: v1.12.0...v1.13.0

v1.12.0 — Runtime Skill Discovery

Runtime Skill Discovery

Adds runtime skill discovery capabilities with REST API, MCP server, pluggable caching, multi-signal relevance ranking, and a Python client.

New Packages

• @skillkit/api — REST API server (Hono) on port 3737

  • GET /search?q=... and POST /search with filters
  • GET /skills/:owner/:repo/:id — get specific skill
  • GET /trending — top skills by relevance score
  • GET /categories — skill categories with counts
  • GET /health and GET /cache/stats
  • Built-in Swagger UI at /docs and OpenAPI 3.1 spec at /openapi.json
  • Sliding-window per-IP rate limiting (60 req/min)

• @skillkit/mcp — MCP server for agent-native discovery

  • 4 tools: search_skills, get_skill, recommend_skills, list_categories
  • 2 resources: skills://trending, skills://categories
  • Stdio transport — works with Claude Desktop, Cursor, any MCP client

• skillkit-client (Python) — async Python client (httpx + pydantic)

  • search(), get_skill(), trending(), categories(), health()

New Core Modules

• Pluggable Cache (@skillkit/core) — MemoryCache with LRU eviction + TTL
• Relevance Ranker — 4-signal scoring (content 40pts, query 30pts, popularity 15pts, references 15pts)
• SKILL.md Parser — frontmatter parsing, reference discovery, content extraction
• Runtime Injector — fetch + cache SKILL.md from GitHub at runtime
• Community Registry — curated registry/SKILLS.md with 26 skills across 12 categories

New CLI Command

• skillkit serve / skillkit server — starts the REST API server
  • --port (-p), --host (-H), --cors, --cache-ttl

Documentation

• Hosted API docs at agenstskills.com/api — interactive Swagger UI
• Rewrote all core docs with clean problem/solution framing and progressive examples
• New pages: REST API, MCP Server, Python Client

Usage

# Start API server
skillkit serve

# MCP server (Claude Desktop / Cursor)
{
  "mcpServers": {
    "skillkit": { "command": "npx", "args": ["@skillkit/mcp"] }
  }
}

# Python client
pip install skillkit-client

Full Changelog

v1.11.0...v1.12.0