skillkit 0.1.0

CLI for the agent-skill economy: lint, package, verify, audit SKILL.md skills
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

# skillkit

[![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
[![Rust](https://img.shields.io/badge/rust-1.95+-orange.svg)](https://www.rust-lang.org/)

Tooling for the agent-skill economy: **lint, package, verify, and audit**
[SKILL.md](https://agentskills.io) skills.

```sh
skillkit lint ./my-skill        # strict frontmatter + structure lint
skillkit pack ./my-skill        # deterministic archive -> content-addressed store
skillkit verify ./my-skill --hash <blake3> --store ~/.local/share/skillkit/store
skillkit audit owner/repo       # engagement-integrity signals (fork-ratio heuristics)
```

## Why

Agent skills are becoming the Dockerfiles of AI agents — and the ecosystem
has formats and marketplaces but no tooling layer:

- **Lint** with unknown-field denial: the frontmatter grammar is tiny and
  anything else is a finding, because a format that accepts everything
  validates nothing.
- **Package** deterministically: same directory ⇒ same BLAKE3 hash ⇒ free
  deduplication, hash-verified updates.
- **Audit** engagement integrity: fork-ratio verdicts and other heuristics
  from [`signalkit-integrity`](https://crates.io/crates/signalkit-integrity),
  because trending metrics get farmed (forks are cheap; 46% fork ratios
  exist in the wild).

## Layered on the estate

| Crate | Role | Reuses |
|---|---|---|
| `skillkit-core` | parse + lint SKILL.md | — (zero-dep) |
| `skillkit-store` | canonical `SKILLPACK1` archives | [`cas-kit`](https://crates.io/crates/cas-kit) (BLAKE3 + zstd store) |
| `skillkit` (CLI) | commands + `audit` | [`signalkit-integrity`](https://crates.io/crates/signalkit-integrity), [`fetch-kit`](https://crates.io/crates/fetch-kit) |

Apache-2.0. Part of the [WyattAu](https://github.com/WyattAu) toolkit estate.