v6.4.0 - SkillSpector audit findings fix

v6.4.0 - ClawHub SkillSpector Audit Findings Fix

Fixed

• Finding 1 (Purpose & Capability): Removed "editing existing skills" from Do NOT, added R5 improvement route disclosure in description
• Finding 2 (Instruction Scope): Removed explicit SkillHub API URL from composition-and-pipeline.md, updated permission table to disclose network access via TRAE built-in tools
• Finding 3 (Persistence & Privilege): Added R5 existing-skill modification path disclosure in description and user warning

Changed

• Version from 6.2.0 to 6.4.0 (skipped 6.3.0 due to ClawHub phantom success lock)
• description: added improvement capability + optional capability disclosure
• Permission table: network access from no to yes (TRAE built-in tools)

Full Changelog: v6.2.0...v6.4.0

v6.3.0 - SkillSpector audit findings fix

v6.3.0 - ClawHub SkillSpector Audit Findings Fix

Fixed

• Finding 1 (Purpose & Capability concern): description said "Do NOT use for editing existing skills" but R5 route explicitly supports improving existing skills. Removed "editing existing skills" from Do NOT, added R5 disclosure in description and optional capability declaration.
• Finding 2 (Instruction Scope concern): composition-and-pipeline.md referenced explicit SkillHub API URL but permission table said "no network access". Removed API URL literal, replaced with generic "TRAE built-in tools"; updated permission table to "network access: yes (via TRAE built-in tools)".
• Finding 3 (Persistence & Privilege concern): R5 existing-skill modification path not disclosed in frontmatter boundary. Added explicit disclosure in description and user warning.

Changed

• Version from 6.2.0 to 6.3.0
• description: removed "editing existing skills" exclusion, added "improve Skill" capability + optional capability disclosure
• Permission table: network access from no to yes (TRAE built-in tools for SkillHub search)
• User warning: added R5 existing-skill modification explanation

Full Changelog: v6.2.0...v6.3.0

v6.2.0 - ClawHub displayName lock fix + README version sync

v6.2.0 - ClawHub displayName lock fix + README version sync

Fixed

• ClawHub displayName 锁定问题: ClawHub 平台 inspect 显示 Skill Forge V32 Fixed（从开发目录名派生），与 slug skill-forge-ai 严重不一致。本次发布显式传 --name "Skill Forge 技能熔炉" 参数尝试覆盖（规则 34）
• README.md 版本号不同步: SKILL.md/plugin.json 已是 v6.1.0 但 README.md 中英文仍停留在 v6.0.1（规则 29 多文件一致性校验）。本次同步到 v6.2.0
• plugin.json description 同步: 同步为与 SKILL.md description 一致

Added

• 权限声明段落: SKILL.md 新增 5 行权限声明表格（网络访问/文件读写/环境变量/subprocess/外部 API），预防 ClawHub SkillSpector 的 MCP Least Privilege finding
• 用户警告段落: README.md 新增用户警告，声明本技能会在用户指定目录创建/修改 skill 文件

Changed

• 版本从 6.1.0 升级到 6.2.0

Notes

• 按 skill-publisher 规则 5（Windows 禁 heredoc）+ 规则 7（--tags 仅 ASCII）+ 规则 32（三平台文件差异化矩阵：ClawHub 用临时副本剔除 README.md/CHANGELOG.md）+ 规则 34（--name 显式传参）严格执行
• 如 ClawHub 后端 displayName 永久锁定无法覆盖，记录待后续 ClawHub 平台修复

Full Changelog: v6.1.0...v6.2.0

v6.1.0 - Single Development Entry Consolidation

v6.1.0

Changed

• Consolidated to single development entry: all future skill-forge modifications only in skill-forge-v32-fixed directory
• Version jump to bypass ClawHub backend version lock (6.0.0/6.0.1/6.0.2 all returned 'already exists' but inspect showed stale Latest=5.2.4)

Consolidated Features (v5.0.0 - v6.0.1)

• Two-entry architecture: skill-forge (forge+assess) + skill-publisher (publish)
• Pre-Gate (Phase -1): Worth doing? Already exists? Too big?
• Five Entry Routes: R1 scratch / R2 dialog / R3 material / R4 draft / R5 improve
• Level Adaptation + One Question at a Time + Confirmation Gate
• Step 0.4 Peer Pre-Check: Search SkillHub before creating
• Meta-Skill Composition + Pipeline Orchestration
• 5 Authoring Principles + 10-item self-check checklist
• Layered Validation: Default lightweight + optional heavy
• Declaration-Behavior Consistency (frontmatter = behavior)

Validation

• SKILL.md v6.1.0
• plugin.json / CHANGELOG.md synced
• GitHub code + tag pushed
• ClawHub published (v6.1.0 registered, latestVersion may show stale due to backend bug)
• Local TRAE synced via sync_skills.py

v6.0.1 - Multi-file consistency fix + rule 33 adaptation

v6.0.1 - 多文件一致性修复 + 规则 33 适配

Fixed

• README 中英文版本号不一致：SKILL.md/plugin.json 已是 v6.0.0 但 README.md 中英文仍停留在 v5.2.4。修复为 v6.0.1（规则 29 多文件一致性校验）
• README 残留"技能发布"触发描述：SKILL.md 声明"发布不在本技能范围内"，但 README 仍列"技能发布"为触发词。移除该描述- displayName 语言策略：displayName 从纯英文 "Skill Forge" 改为双语并列 "Skill Forge 技能熔炉"（规则 33）

Changed

• 版本从 6.0.0 升级到 6.0.1

平台适配

• GitHub: 保留所有文件（README.md/CHANGELOG.md/LICENSE/.claude-plugin/）
• ClawHub: 临时副本剔除 README.md/CHANGELOG.md/.gitignore（规则 32）
• SkillHub: 临时副本剔除 LICENSE/.claude-plugin/（规则 32）

v6.0.0 - Major Release: Two-Entry Architecture + Pre-Gate + 5 Entry Routes + Peer Pre-Check

v6.0.0 - Major Release

Consolidates all features from v5.0.0 through v5.2.5 into a clean major release. Resolves ClawHub backend version lock issue.

Two-Entry Architecture

• skill-forge (this skill): Forge + Assess
• skill-publisher (separate skill): Publish to GitHub + ClawHub + SkillHub

Features (consolidated from v5.0.0 - v5.2.4)

v5.0.0

• Pre-Gate (Phase -1): Worth doing? Already exists? Too big?
• Five Entry Routes: R1 scratch / R2 dialog / R3 material / R4 draft / R5 improve
• Level Adaptation: Auto-detect user level from language
• One Question at a Time: Each round asks only 1 question + options
• Confirmation Gate: One-page summary before writing
• Layered Validation: Default lightweight + optional heavy
• Last Mile: Install + self-test + packaging
• Description Optimization Iteration
• Skill Improvement Diagnosis: Symptom -> Check Point -> Action

v5.1.0

• Step 0.4 Peer Pre-Check: Search SkillHub before creating
• Meta-Skill Composition: Decompose need + pipeline orchestration
• Three pipeline patterns: sequential / branch / conditional

v5.2.0

• 5 Authoring Principles: Declaration-behavior consistency + proportional power + minimum privilege + progressive disclosure + user awareness
• 10-item self-check checklist (backported from skill-auditor)
• Full frontmatter: version / license / allowed-tools / metadata.openclaw

v5.2.1

• R4 entry pre-check skip fixed
• Declaration-behavior consistency (Critical): Removed publishing from skill-forge, delegated to skill-publisher
• Phase 3 changed to publish handoff reminder only

Validation

• SKILL.md v6.0.0 (two-entry, 244 lines)
• authoring-principles.md (5 principles + 10-item checklist)
• All R1-R5 entries route through Step 0.4 pre-check
• Phase 3 is handoff reminder only
• plugin.json / CHANGELOG.md synced to v6.0.0
• Local TRAE synced via sync_skills.py
• ClawHub published (latestVersion may show stale 5.1.0 due to backend bug)

v5.2.4 - ClawHub 后端 publish 问题重试

v5.2.4 - ClawHub 后端 publish 问题重试

Fixed

• 同 [5.2.1] 的所有修复（R4 入口同类预检 + 声明-行为不一致 + summary/plugin.json 同步）
• ClawHub 后端 publish 问题重试：5.2.3 publish 返回成功但 inspect not found，递增到 5.2.4 重试

Changed

• 版本从 5.2.3 升级到 5.2.4

已知问题

• ClawHub 后端 bug：publish 5.2.x 返回 OK 但 inspect 不可见，版本列表未更新。GitHub/SkillHub/本地安装 均已发布 5.2.4

本次代码推送通过 Git Data API 降级方案完成。

v5.2.3 - ClawHub 后端版本号锁定解决

v5.2.3 - ClawHub 后端版本号锁定解决

Fixed

• 同 [5.2.1] 的所有修复（R4 入口同类预检 + 声明-行为不一致 + summary/plugin.json 同步）
• ClawHub 后端版本号锁定：5.2.2 在 ClawHub 上 inspect not found 但 publish 报已存在（状态不一致），递增到 5.2.3 绕过锁定

Changed

• 版本从 5.2.2 升级到 5.2.3（ClawHub 版本号锁定解决）

本次代码推送通过 Git Data API 降级方案完成（git protocol 不可达）。

v5.2.2 - SkillHub 版本号冲突解决

v5.2.2 - SkillHub 版本号冲突解决

Fixed

• 同 [5.2.1] 的所有修复（R4 入口同类预检 + 声明-行为不一致 + summary/plugin.json 同步）
• SkillHub 版本号冲突：5.2.1 已被其他会话推送，递增到 5.2.2

Changed

• 版本从 5.2.1 升级到 5.2.2（SkillHub 版本号冲突解决）

本次代码推送通过 Git Data API 降级方案完成（git protocol 不可达）。

v5.2.1 - R4 entry pre-check fix + description-behavior alignment

Fixed

• R4 entry same-class pre-check skip: add reverse-engineering + confirmation gate + Step 0.4 pre-check
• R2/R3 entry: explicitly route to Step 0.4 after confirmation gate
• Step 0.4: add scope declaration (R1/R2/R3/R4 mandatory, R5 skip)
• Description-behavior mismatch: remove skill publishing trigger, point to skill-publisher
• Phase 3: change to publish handoff reminder
• summary/plugin.json/README: sync to v5.2.1