v1.3.0 — Community Launch

What's New

8 MCP Tools

• skillsmp_search — Keyword search across SkillsMP marketplace
• skillsmp_ai_search — AI-powered semantic search (Cloudflare AI)
• skillsmp_scan_skill — Security scan a GitHub skill repo (60+ patterns)
• skillsmp_search_safe — Search + auto-scan top results
• skillsmp_install_skill — Scan, gate, and install to ~/.claude/skills/
• skillsmp_uninstall_skill — Remove an installed skill
• NEW skillsmp_list_installed — List installed skills with risk levels
• NEW skillsmp_audit_installed — Deep security audit of installed skills

Security Scanner

• 95 threat patterns across 20 categories
• Critical patterns block installation unconditionally
• Multi-line evasion detection
• Content hashing for TOCTOU verification
• Output sanitization against prompt injection

Cloud Sync Engine

• Subscription-based skill sync from SkillsMP API
• Lock file for stable change detection
• Conflict policies (skip/overwrite)
• Dry run support

Multi-Client Support

• Claude Code, OpenClaw, Cursor, Windsurf, nanobot
• Configuration examples for all clients

Community Infrastructure

• Issue templates (bug report, feature request, skill submission)
• PR template with checklist
• CONTRIBUTING.md with contribution guides
• SKILL.md for agent discoverability
• docs/THREAT_PATTERNS.md documenting all 95 patterns

Install

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}