Issues

`install --dry-run` / `sync --dry-run` perform real network fetches and rewrite `.skillfile/cache/` whenever a locked SHA (or resolvable ref) exists

eljulians/skillfile#214 · opened

on Aug 11, 2026

manifest quoting/comment handling diverges from SPEC - SPEC’s own quoting example is rejected, quoted fields starting with `#` are treated as comments, single quotes unsupported

eljulians/skillfile#213 · opened

on Aug 11, 2026

`skillfile format` silently deletes comments and forward-compat lines

eljulians/skillfile#208 · opened

on Aug 10, 2026

a malformed `config.toml` is silently wiped by any config write - tokens and personal install targets lost; writes are also non-atomic

eljulians/skillfile#205 · opened

on Aug 10, 2026

one unknown platform name in the Skillfile breaks `install --update`, `info`, and `status` - while plain `install` correctly skips it

eljulians/skillfile#204 · opened

on Aug 10, 2026

lock entries and cache dirs are never pruned when a Skillfile line is deleted - `validate` then errors on an orphan that no CLI command can remove

eljulians/skillfile#203 · opened

on Aug 10, 2026

skills.sh preview: names with spaces make the raw-GitHub fast path structurally dead; the repo-root `SKILL.md` fallback can preview the wrong skill

eljulians/skillfile#202 · opened

on Aug 10, 2026

`skillfile resolve` panics (abort, exit 101) when the first install target is a skills-only platform and the conflicted entry is an agent

eljulians/skillfile#199 · opened

on Aug 10, 2026

directory entries - files added or deleted locally are invisible to `status`/`diff`/`pin`; `pin` says "nothing to pin" and a fresh install silently loses the added files

eljulians/skillfile#198 · opened

on Aug 10, 2026

no HTTP timeouts anywhere - a stalled server hangs `install`/`add`/`search` forever

eljulians/skillfile#196 · opened

on Aug 10, 2026

`install --update` / `upgrade` silently destroy local edits of `url`- and `local`-sourced installs (auto-pin protection only exists for github/gitlab)

eljulians/skillfile#194 · opened

on Aug 10, 2026

GitLab directory listing turns a 404 into "directory … contains no files" - asserting the opposite of what happened (GitHub errors explicitly)

eljulians/skillfile#193 · opened

on Aug 10, 2026

agent entries targeted only at skills-only platforms are dropped with zero feedback; `validate` says OK

eljulians/skillfile#190 · opened

on Aug 10, 2026

flat (agent) directory deploys collapse subdirectories by filename - same-named files silently shadow each other

eljulians/skillfile#189 · opened

on Aug 10, 2026

bulk `add` (discovery/TUI path) swallows every per-entry failure and exits 0

eljulians/skillfile#188 · opened

on Aug 10, 2026

deploy failures swallow the real cause - symlink rejections and IO errors surface as "only 1 of 2 expected file(s) were written"

eljulians/skillfile#187 · opened

on Aug 10, 2026

agentskill.sh page-scrape fallback extracts wrong-but-plausible GitHub coordinates

eljulians/skillfile#186 · opened

on Aug 10, 2026

Codex local scope deploys to `.codex/skills/`, which Codex does not scan - locally deployed skills are never picked up

eljulians/skillfile#185 · opened

on Aug 10, 2026

a symlinked destination skill directory is silently destroyed by `install --update` and silently no-oped by plain `install` - contradicting the v1.7.2 "destination symlinks are rejected" claim

eljulians/skillfile#184 · opened

on Aug 10, 2026

Add support for awesomeskill.ai

eljulians/skillfile#177 · opened

on Jul 21, 2026

rate-limit/permission guidance is GitHub-specific and inconsistent - GitLab 403s advise `GITHUB_TOKEN`, 429 gets no hint at all

eljulians/skillfile#165 · opened

on Jul 13, 2026

Refactor root marker path resolution into a shared helper

eljulians/skillfile#155 · opened

on Jul 10, 2026

running from a subdirectory fails with a garbled message, and `skillfile init` there silently creates a second, nested Skillfile

eljulians/skillfile#144 · opened

on Jul 9, 2026

`url` entries are excluded from the lockfile and from transactional caching - unpinnable, unreproducible, offline-hostile, and contradicting SPEC.md

eljulians/skillfile#143 · opened

on Jul 9, 2026

changing `path_in_repo` in the Skillfile is ignored - "up to date" is decided by SHA alone, so the old path's content is served indefinitely

eljulians/skillfile#141 · opened

on Jul 9, 2026

Navigation Menu

Repository navigation

Issues

`install --dry-run` / `sync --dry-run` perform real network fetches and rewrite `.skillfile/cache/` whenever a locked SHA (or resolvable ref) exists

manifest quoting/comment handling diverges from SPEC - SPEC’s own quoting example is rejected, quoted fields starting with `#` are treated as comments, single quotes unsupported

`skillfile format` silently deletes comments and forward-compat lines

a malformed `config.toml` is silently wiped by any config write - tokens and personal install targets lost; writes are also non-atomic

one unknown platform name in the Skillfile breaks `install --update`, `info`, and `status` - while plain `install` correctly skips it

lock entries and cache dirs are never pruned when a Skillfile line is deleted - `validate` then errors on an orphan that no CLI command can remove

skills.sh preview: names with spaces make the raw-GitHub fast path structurally dead; the repo-root `SKILL.md` fallback can preview the wrong skill

`skillfile resolve` panics (abort, exit 101) when the first install target is a skills-only platform and the conflicted entry is an agent

directory entries - files added or deleted locally are invisible to `status`/`diff`/`pin`; `pin` says "nothing to pin" and a fresh install silently loses the added files

no HTTP timeouts anywhere - a stalled server hangs `install`/`add`/`search` forever

`install --update` / `upgrade` silently destroy local edits of `url`- and `local`-sourced installs (auto-pin protection only exists for github/gitlab)

GitLab directory listing turns a 404 into "directory … contains no files" - asserting the opposite of what happened (GitHub errors explicitly)

agent entries targeted only at skills-only platforms are dropped with zero feedback; `validate` says OK

flat (agent) directory deploys collapse subdirectories by filename - same-named files silently shadow each other

bulk `add` (discovery/TUI path) swallows every per-entry failure and exits 0

deploy failures swallow the real cause - symlink rejections and IO errors surface as "only 1 of 2 expected file(s) were written"

agentskill.sh page-scrape fallback extracts wrong-but-plausible GitHub coordinates

Codex local scope deploys to `.codex/skills/`, which Codex does not scan - locally deployed skills are never picked up

a symlinked destination skill directory is silently destroyed by `install --update` and silently no-oped by plain `install` - contradicting the v1.7.2 "destination symlinks are rejected" claim

Add support for awesomeskill.ai

rate-limit/permission guidance is GitHub-specific and inconsistent - GitLab 403s advise `GITHUB_TOKEN`, 429 gets no hint at all

Refactor root marker path resolution into a shared helper

running from a subdirectory fails with a garbled message, and `skillfile init` there silently creates a second, nested Skillfile

`url` entries are excluded from the lockfile and from transactional caching - unpinnable, unreproducible, offline-hostile, and contradicting SPEC.md

changing `path_in_repo` in the Skillfile is ignored - "up to date" is decided by SHA alone, so the old path's content is served indefinitely