spm-cli 0.4.0

Skill package manager — declare AI skills in ai.json, materialize them for Claude/Copilot without polluting your repo.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

use anyhow::Result;
use std::path::Path;

/// Recursively copy `src` dir into `dst`, skipping the `.git` directory.
///
/// Symlinks are skipped rather than followed: a hostile skill repo could
/// otherwise ship `SKILL.md -> ../../../.ssh/id_rsa` and have its target's
/// contents copied into the vendor plugin dir where an agent might read it.
pub fn copy_tree(src: &Path, dst: &Path) -> Result<()> {
    std::fs::create_dir_all(dst)?;
    for entry in std::fs::read_dir(src)? {
        let entry = entry?;
        let name = entry.file_name();
        if name == ".git" {
            continue;
        }
        // `file_type()` reflects the entry itself (does not follow symlinks).
        let ft = entry.file_type()?;
        if ft.is_symlink() {
            eprintln!(
                "warning: skipping symlink `{}` while copying skill",
                entry.path().display()
            );
            continue;
        }
        let from = entry.path();
        let to = dst.join(&name);
        if ft.is_dir() {
            copy_tree(&from, &to)?;
        } else {
            std::fs::copy(&from, &to)?;
        }
    }
    Ok(())
}