0.6.7

Agent Skills 0.6.7 is a fixes-and-content release: a live Codex hook fix, honest plugin-manifest versions, a new provider, real skill-content additions, and a round of CI guards.

Highlights

• Codex SessionStart hook fixed (#474, @ayobamiseun). The session-start hook now emits the standard SessionStart envelope on every path, so Codex CLI (and Claude Code) stop rejecting it. Resolves the hook failure in #465.
• Plugin manifests now tell the truth about versions (#451, @Liyuk, closes #440). Every manifest is pinned to the release version, with a CI check that keeps them in lockstep with the tag, so update detection works and the versions can't silently drift again.
• Command Code is a native provider (#450, @vipulgupta2048). Command Code reads the pack's skills/ directly via cmd skills, so it's real support, not just a listing. See docs/commandcode-setup.md.
• Shared reference links fixed and guarded (#469, @coolTheWorld, closes #468). The skill links to the shared references/ checklists were wrong even in a full install; they now resolve, with a CI validator to keep them that way.

Skills and content

• spec-driven-development: a Phase 0 capability map for large, multi-capability requests, propose a module map and dependency order before speccing, while leaving the simple single-spec path untouched (#476, @ayobamiseun, from #431).
• planning-and-task-breakdown: the task-list target is now pluggable, so teams on an external tracker (beads, Jira, Linear) aren't forced into tasks/todo.md (#487, @ayobamiseun, closes #482).
• api-and-interface-design: an idempotency-key implementation guide, derive the key from the intent, not the attempt (#479, @abhisheksharma).
• security-and-hardening: a Data Privacy & Compliance section, classify data as you add it (#470, @HMAKT99).
• source-driven-development: retrieval safety, treat fetched docs as untrusted data and never hardcode outbound endpoints from examples (#53, @KoolP).

Tooling and fixes

• Codex install flow completed and plugin metadata aligned (#452, @dev-minggyu).
• Antigravity install path corrected for current agy releases (#481, @yunaremaia, from #445).
• Eval hardening: reject incomplete grader results (#473, @NgoQuocViet200), a more discriminating TDD case (#471, @federicobartoli), throwaway-workspace cleanup (#458) and --behavioral skill-name validation (#456, @Sunil56224972).
• New CI guards: artifact-path validator for spec/plan/todo (#464, @nucliweb) and Node 24 runtimes (#459, @ENNEADLABS).

Thanks

Thanks to everyone who contributed this release: @ayobamiseun, @Liyuk, @coolTheWorld, @vipulgupta2048, @HMAKT99, @abhisheksharma, @federicobartoli, @NgoQuocViet200, @yunaremaia, @dev-minggyu, @KoolP, @Sunil56224972, @nucliweb, and @ENNEADLABS.

Full Changelog: 0.6.6...0.6.7