v0.1.0

🎉 Initial Release

Transparency verifier for Agent Skills — verify that skills declare their behavior honestly.

Features

• Parse SKILL.md trust declarations (YAML frontmatter)
• Verification rules: network, filesystem, shell, environment, data-flow, obfuscation
• AST-aware code scanning (skips comments/strings)
• Monorepo support (verify-all)
• Interactive wizard (init)
• SVG badge generation (badge)
• Agent Skills registry lookup (lookup)
• External scanner integrations (Cisco, Aguara)
• GitHub Action for CI/CD
• Output formats: terminal, JSON, SARIF

What's Changed

• Add skill parser with trust declaration validation by @Ryan-focus in #1
• Add registry integration, badge generation, and GitHub Action support by @Ryan-focus in #2
• Expand README and TRUST-SPEC documentation with ecosystem context by @Ryan-focus in #3
• Add AST-aware code analysis, monorepo support, and external scanner integrations by @Ryan-focus in #4
• Add security hardening: input validation, SSRF prevention, and ReDoS fixes by @Ryan-focus in #5
• Bundle GitHub Action with ncc for Marketplace distribution by @Ryan-focus in #6

New Contributors

• @Ryan-focus made their first contribution in #1

Full Changelog: https://github.com/Ryan-focus/skill-trust/commits/v0.1.0