dsh-skill-pack-security v1.2.0

[1.2.0] - 2026-08-14

Fixed

• docs/release-checklist.md batch version command now reads UTF-8 and writes BOM-less UTF-8 via [System.IO.File]::WriteAllText (Windows PowerShell 5.1's Set-Content -Encoding UTF8 adds a BOM, which the official parser rejects because the first line must be exactly ---); a verification check asserts the BOM-less write and the layout check rejects any BOM in a SKILL.md.
• prompt-injection-review: grep -E '^\s*鈥? replaced with POSIX [[:space:]] in both editions (the GNU-only \s silently changes meaning under macOS BSD grep); a lint check now forbids GNU-only escapes in shipped shell greps.
• provider plugin fails loud on misconfiguration: empty/nonexistent skillsDir (or no resolvable layout) throws at apply() instead of mounting zero skills; root resolution supports both the repository and the published layouts.
• dependency-audit: pnpm audit --json advisories described correctly as an object keyed by advisory id (was "array") in both editions.
• CI pins the deepseek-harness checkout to a commit for reproducible verification.

Added

• Verification: 7 new checks (19 total) 鈥?zh鈫攅n structural parity, references wiring, provider-version sync, documented skill-root ranks vs official constants, grep portability, secret self-check, UTF-8-safe release checklist; OFFICIAL_SKILLS now derives from the checkout; Windows CI job runs the verification and the install.ps1 exercise.
• Distribution: provider is now an npm bundle (dsh.bundle + cordis.patch.yml, dsh plugin add ready); prepack embeds both editions into the tarball; publishing checklist documented in provider/README.md.
• Installers: manifest-based install with -Uninstall/--uninstall, -DryRun/--dry-run, and overwrite protection (-Force/--force to replace foreign same-name skills).
• secret-scan: trufflehog (history + automatic verification), gitleaks protect --staged, --log-opts bounded scans, report-file hygiene, more token families in the degraded grep.
• dependency-audit: osv-scanner multi-ecosystem/offline section, SBOM inventory, provenance/signature verification (npm audit signatures, dist.integrity).
• supply-chain-review: git-dependency prepare script vector, GitHub Action SHA pinning, dist.fileCount/tarball-host anomalies, lockfile-growth re-check.
• prompt-injection-review: DSH built-in defense checklist (user-only /name gesture, catalog/body escaping, framing declaration), new surfaces (subagent/workflow prompts, tool render outputs, terminal echoes, image/PDF text, cordis.yml !!js blocks), write-approval and web-quarantine mitigations.
• security-audit: IaC/container asset surface (trivy config/checkov, trivy image), pull_request_target and action-pinning checks, finding ids (F-01鈥?, optional compliance mapping appendix.
• Governance: CHANGELOG.md, SECURITY.md, CONTRIBUTING.md, and Dependabot configuration.